fixed security issue again, thanks Niphlod
This commit is contained in:
@@ -1 +1 @@
|
|||||||
Version 2.9.6-beta+timestamp.2014.08.26.14.30.42
|
Version 2.9.6-beta+timestamp.2014.08.26.14.38.05
|
||||||
|
|||||||
@@ -32,7 +32,7 @@ try:
|
|||||||
except:
|
except:
|
||||||
hosts = (http_host, )
|
hosts = (http_host, )
|
||||||
|
|
||||||
if request.env.http_x_forwarded_for or request.is_https:
|
if request.is_https:
|
||||||
session.secure()
|
session.secure()
|
||||||
elif (remote_addr not in hosts) and (remote_addr != "127.0.0.1") and \
|
elif (remote_addr not in hosts) and (remote_addr != "127.0.0.1") and \
|
||||||
(request.function != 'manage'):
|
(request.function != 'manage'):
|
||||||
|
|||||||
@@ -32,7 +32,7 @@ try:
|
|||||||
except:
|
except:
|
||||||
hosts = (http_host, )
|
hosts = (http_host, )
|
||||||
|
|
||||||
if request.env.http_x_forwarded_for or request.is_https:
|
if request.is_https:
|
||||||
session.secure()
|
session.secure()
|
||||||
elif (remote_addr not in hosts) and (remote_addr != "127.0.0.1") and \
|
elif (remote_addr not in hosts) and (remote_addr != "127.0.0.1") and \
|
||||||
(request.function != 'manage'):
|
(request.function != 'manage'):
|
||||||
|
|||||||
@@ -32,7 +32,7 @@ try:
|
|||||||
except:
|
except:
|
||||||
hosts = (http_host, )
|
hosts = (http_host, )
|
||||||
|
|
||||||
if request.env.http_x_forwarded_for or request.is_https:
|
if request.is_https:
|
||||||
session.secure()
|
session.secure()
|
||||||
elif (remote_addr not in hosts) and (remote_addr != "127.0.0.1") and \
|
elif (remote_addr not in hosts) and (remote_addr != "127.0.0.1") and \
|
||||||
(request.function != 'manage'):
|
(request.function != 'manage'):
|
||||||
|
|||||||
Reference in New Issue
Block a user