enabled admin/appadmin by default from trusted addresses, thanks Paolo
This commit is contained in:
@@ -30,6 +30,9 @@ except:
|
||||
|
||||
if request.is_https:
|
||||
session.secure()
|
||||
elif request.env.trusted_lan_prefix and \
|
||||
remote_addr.startswith(request.env.trusted_lan_prefix):
|
||||
request.is_local = True
|
||||
elif (remote_addr not in hosts) and (remote_addr != '127.0.0.1') and \
|
||||
(request.function != 'manage'):
|
||||
raise HTTP(200, T('appadmin is disabled because insecure channel'))
|
||||
|
||||
Reference in New Issue
Block a user