On 06/17/2011 05:45 PM, Roberto De Ioris wrote: > > Il giorno 17/giu/2011, alle ore 17.28, Giacomo Bagnoli ha scritto: > >> Thanks, I will try tomorrow to set the server_name explicitly. Btw, I did >> not upgrade nginx, its conf and its version where the same during both tests. >> >> Giacomo >> > > > Sorry i have totally forgot about a security measure added in 0.9.7 > > The 0.9.6 behaviour was using the HTTP_HOST header (if available), but as > it can be set to custom value by clients, a evil clients can potentially > create different apps > > (it is hard as there are different player in the game but theoretically > possible) > > --vhost-host > > re-set the old behavior
Ok, it works now using --vhost-host, thanks again. I didn't manage to set server_name variable correctly, as server_name = $host set the var to... "$host" as literal (uwsgi created a app for $host|), and using $hostname set the server name to the hostname of the machine (at least, it seems so). But I'll dig into nginx doc for this :) For now the --vhost-host is enough for me. Giacomo _______________________________________________ uWSGI mailing list [email protected] http://lists.unbit.it/cgi-bin/mailman/listinfo/uwsgi
