Astro Info

Astro                    v6.0.8
Vite                     v7.3.1
Node                     v25.2.1
System                   Linux (x64)
Package Manager          pnpm
Output                   server
Adapter                  @astrojs/node (v10.0.3)
Integrations             @sentry/astro (v10.45.0)

If this issue only occurs in one browser, which browser is a problem?

No response

Describe the Bug

After upgrading to v6.x I noticed that API requests are no longer being allowed, returning Cross-site POST form submissions are forbidden. I have Allowed Domains set up correctly and in development I run astro dev behind a traefik reverse proxy that handles TLS.

What's the expected result?

I expect to have my domain listed in allowed domains with the https protocol and be allowed to make requests to it if it is behind a TLS terminating reverse proxy

Link to Minimal Reproducible Example

https://github.com/ikadix/astro-allowed-domain-example

Participation

• I am willing to submit a pull request for this issue.