#36514: Improve ALLOWED_HOSTS error message: show both values
------------------------------------+--------------------------------------
     Reporter:  Klaas van Schelven  |                    Owner:  (none)
         Type:  New feature         |                   Status:  closed
    Component:  HTTP handling       |                  Version:  5.2
     Severity:  Normal              |               Resolution:  wontfix
     Keywords:                      |             Triage Stage:  Unreviewed
    Has patch:  0                   |      Needs documentation:  0
  Needs tests:  0                   |  Patch needs improvement:  0
Easy pickings:  0                   |                    UI/UX:  0
------------------------------------+--------------------------------------
Comment (by Klaas van Schelven):

 >  In real world deployments, it's common to include internal hostnames,
 IP addresses, or ephemeral domains that are not externally visible, for
 example in environments where SSL termination and routing are handled
 separately from the Django app itself.

 That's a fair point for the "this isn't a good fit for Django" case.

 I'd argue that the following point remains: for the most common
 misconfiguration at the proxy level, Django now explicitly suggests to add
 localhost to ALLOWED_HOSTS. This is generally exactly the opposite of what
 you want. Could we say _that_ is a bug?
-- 
Ticket URL: <https://code.djangoproject.com/ticket/36514#comment:2>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To view this discussion visit 
https://groups.google.com/d/msgid/django-updates/010701982e35e6dd-071218ad-741d-41b2-bbad-8286e1dd0098-000000%40eu-central-1.amazonses.com.

Reply via email to