ok, your right. the latest commit removes the host injection. https://github.com/geoadmin/mf-chsdi3/commit/62658ea1d4f48188e00d8b2d2f3a9765f15bd40a