toaster: settings.py , add * to ALLOWED_HOSTS
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest1 patch 0 repliesNew
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/1 | bitbake: toaster: settings set ALLOWED_HOSTS to * in debug modelib/ | +13 | 0 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [PATCH 0/1] [krogoth] toaster: settings.py , add * to ALLOWED_HOSTS
This backports 7c3a47ed8965c3a3eb90a9a4678d5caedbba6337 to krogoth so that toaster can work with Django (1.8.16).
From the patch to master's message:
As of Django 1.8.16, django is rejecting any HTTP_HOST header that is not on the ALLOWED_HOST list. We often need to reference the toaster server via a fqdn, if we start it via webport=0.0.0.0:8000 for instance, and are hitting the server from a laptop. This change does reduce the protection from a DNS rebinding attack, however, if you are running the toaster server outside a protected network, you need to be using the production instance.
Fixes [YOCTO #10586 ].
The following changes since commit 3bf928a3b6354bc09c87fcbf9e3972c8d368aaa3:
dev-manual: Fixed typo for "${INC_PR}.0" (2016-11-16 10:38:24 +0000)are available in the git repository at:
git://git.yoctoproject.org/poky-contrib bavery/toaster/krogoth-HOSTFIX
http://git.yoctoproject.org/cgit.cgi/poky-contrib/log/?h=bavery/toaster/krogoth-HOSTFIX
brian avery (1):
bitbake: toaster: settings set ALLOWED_HOSTS to * in debug mode
lib/toaster/toastermain/settings.py | 16 +++++++++++++--- 1 file changed, 13 insertions(+), 3 deletions(-)
--
1.9.1