Lighttpd

can confirm this is still the case in 1.5 rev 2140

stbuehler (IRC) took a look at this today, this seems to have fixed it (i myself have done min testing at this stage - very quick test on 1.5)

diff --git a/src/request.c b/src/request.c
index 4298873..4f83175 100644
--- a/src/request.c
++ b/src/request.c
@ -125,7 +125,7 @ static int request_check_hostname(server srv, connection *con, buffer *host) {
}
} else if (i == 0) {
/ the first character of the hostname */
- if (!light_isalpha(c)) {
if (!light_isalnum(c)) {
return -1;
}
label_len++;