dinislage/web2py
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

increased admin (is_local) security, thanks Jonathan

Browse Source
This commit is contained in:
mdipierro
2012-10-10 12:00:59 -05:00
parent f764eb2653
commit 36fc758690
2 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
VERSION
View File

@@ -1 +1 @@
Version 2.1.0 (2012-10-10 11:57:26) dev
Version 2.1.0 (2012-10-10 12:00:56) dev

11
gluon/main.py
View File

@@ -425,7 +425,6 @@ def wsgibase(environ, responder):
# ##################################################
app = request.application ## must go after url_in!
http_host = env.http_host.split(':',1)[0]
if not global_settings.local_hosts:
local_hosts = ['127.0.0.1','::ffff:127.0.0.1']
if not global_settings.web2py_runtime_gae:
@@ -434,11 +433,15 @@ def wsgibase(environ, responder):
except TypeError:
pass
try:
local_hosts.append(socket.gethostbyname(http_host))
if env.server_name:
local_hosts += [
env.server_name,
socket.gethostbyname(env.server_name)]
except (socket.gaierror,TypeError):
pass
global_settings.local_hosts = local_hosts
local_hosts = global_settings.local_hosts + [http_host]
global_settings.local_hosts = local_hosts
else:
local_hosts = global_settings.local_hosts
client = get_client(env)
x_req_with = str(env.http_x_requested_with).lower()