Fixed #19866 -- disallowed hosts return 400