I am getting ready to launch a small web app and decided to scan the site with the Acunetix Web Vulnerability Scanner. I was quite pleased with the results for the most part, but the scanner reports a high level security issue with the setting of the Host header. The scanner provides the following link for more information http://www.skeletonscribe.net/2013/05/practical-http-host-header-attacks.html
Far as I can tell the vulnerability comes into play if you are using the host header to generate URLs, be they urls inserted into sent emails or inserted into pages.
Am I correct in thinking that this is not an issue for a web app that is not using the Host header to create urls in any way?