Il giorno 17/giu/2011, alle ore 17.28, Giacomo Bagnoli ha scritto:

> Thanks, I will try tomorrow to set the server_name explicitly. Btw, I did not 
> upgrade nginx, its conf and its version where the same during both tests.
> 
> Giacomo
> 


Sorry i have totally forgot about a security measure added in 0.9.7

The 0.9.6 behaviour was using the HTTP_HOST header (if available), but as 
it can be set to custom value by clients, a evil clients can potentially  
create different apps

(it is hard as there are different player in the game but theoretically 
possible)

--vhost-host

re-set the old behavior

By the way i need to fix the bug in empty server_name



--
Roberto De Ioris
http://unbit.it

_______________________________________________
uWSGI mailing list
[email protected]
http://lists.unbit.it/cgi-bin/mailman/listinfo/uwsgi

Reply via email to