Changeset - d483e2df546f
[Not reviewed]
default
0 2 0
Mads Kiilerich - 4 years ago 2021-05-27 00:48:35
mads@kiilerich.com
ini: set translate_forwarded_server = False when using paste prefix middleware

Paste Deploy PrefixMiddleware will be default trust HTTP headers that a proxy
server might have set. That can be a problem if there is no proxy server or if
the proxy just pass these headers through.

Change the configuration example to disable this translation.
2 files changed with 2 insertions and 0 deletions:
0 comments (0 inline, 0 general)
development.ini
Show inline comments
 
@@ -81,6 +81,7 @@ max_request_body_size = 107374182400
 
#[filter:proxy-prefix]
 
#use = egg:PasteDeploy#prefix
 
#prefix = /<your-prefix>
 
#translate_forwarded_server = False
 

	
 
[app:main]
 
use = egg:kallithea
kallithea/templates/ini/template.ini.mako
Show inline comments
 
@@ -145,6 +145,7 @@ reload-on-exception = true             ;
 
#[filter:proxy-prefix]
 
#use = egg:PasteDeploy#prefix
 
#prefix = /<your-prefix>
 
#translate_forwarded_server = False
 

	
 
[app:main]
 
use = egg:kallithea
0 comments (0 inline, 0 general)