Skip to content

Commit 2c30e5f

Browse files
committed
ref(controller): remove redundant ALLOWED_HOSTS setting
1 parent cc3d2de commit 2c30e5f

1 file changed

Lines changed: 3 additions & 7 deletions

File tree

controller/deis/settings.py

Lines changed: 3 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -20,9 +20,9 @@
2020

2121
CONN_MAX_AGE = 60 * 3
2222

23-
# Hosts/domain names that are valid for this site; required if DEBUG is False
24-
# See https://docs.djangoproject.com/en/1.5/ref/settings/#allowed-hosts
25-
ALLOWED_HOSTS = ['localhost']
23+
# SECURITY: change this to allowed fqdn's to prevent host poisioning attacks
24+
# https://docs.djangoproject.com/en/1.6/ref/settings/#allowed-hosts
25+
ALLOWED_HOSTS = ['*']
2626

2727
# Local time zone for this installation. Choices can be found here:
2828
# http://en.wikipedia.org/wiki/List_of_tz_zones_by_name
@@ -304,10 +304,6 @@
304304

305305
APP_URL_REGEX = '[a-z0-9-]+'
306306

307-
# SECURITY: change this to allowed fqdn's to prevent host poisioning attacks
308-
# see https://docs.djangoproject.com/en/1.5/ref/settings/#std:setting-ALLOWED_HOSTS
309-
ALLOWED_HOSTS = ['*']
310-
311307
# Honor HTTPS from a trusted proxy
312308
# see https://docs.djangoproject.com/en/1.6/ref/settings/#secure-proxy-ssl-header
313309
SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')

0 commit comments

Comments
 (0)