increased security in admin and appadmin

2014-08-25 16:36:10 -05:00
parent 353d83aa4e
commit bac9039c6e
5 changed files with 5 additions and 5 deletions
@@ -32,7 +32,7 @@ try:
 except:
    hosts = (http_host, )

-if request.env.http_x_forwarded_for or request.is_https:
+if request.is_https:
    session.secure()
 elif (remote_addr not in hosts) and (remote_addr != "127.0.0.1") and \
    (request.function != 'manage'):