Validate signatures against the provider's exact public stream URL
Validate signatures against the provider's exact public stream URL When a provider signs a streaming handshake URL, validate the exact public URL used to open that stream. Do not replace its scheme with the HTTP transport scheme seen by the application framework or reverse proxy…