#30017: Django should assume port 443 for https in
django.utils.http.is_same_domain()
-----------------------------------+--------------------------------------
     Reporter:  Ruslan Dautkhanov  |                    Owner:  (none)
         Type:  Bug                |                   Status:  new
    Component:  HTTP handling      |                  Version:  2.1
     Severity:  Normal             |               Resolution:
     Keywords:                     |             Triage Stage:  Unreviewed
    Has patch:  0                  |      Needs documentation:  0
  Needs tests:  0                  |  Patch needs improvement:  0
Easy pickings:  0                  |                    UI/UX:  0
-----------------------------------+--------------------------------------
Changes (by Ruslan Dautkhanov):

 * status:  closed => new
 * resolution:  invalid =>


Comment:

 Hi Carlton,

 If Django assume that port 443 is default for httpS, then it'll not fail
 Referer check in this case.

 https://web.site.com/
 and
 https://web.site.com:443/
 are the same thing, but not for Django referer check.

 What we did in nginx is a workaround.

 Real problem is on Django side.

 Thank you!
 Ruslan

-- 
Ticket URL: <https://code.djangoproject.com/ticket/30017#comment:5>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/063.54100939a773437d2ee972a664eca329%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to