jingrow/gunicorn
1
0
Fork 0
mirror of https://github.com/frappe/gunicorn.git synced 2026-01-14 11:09:11 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #426 from mpaolini/marco_develop

Browse Source 
allow bypassing of forwarded_allow_ips check
This commit is contained in:
Randall Leeds 2012-10-26 12:45:21 -07:00
commit af473a8b43
2 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
gunicorn/config.py
View File

@ -706,6 +706,10 @@ class ForwardedAllowIPS(Setting):
desc = """\
Front-end's IPs from which allowed to handle X-Forwarded-* headers.
(comma separate).
Set to "*" to disable checking of Front-end IPs (useful for setups
where you don't know in advance the IP address of Front-end, but
you still trust the environment)
"""
class AccessLog(Setting):

3
gunicorn/http/wsgi.py
View File

@ -85,7 +85,8 @@ def create(req, sock, client, server, cfg):
secure_headers = cfg.secure_scheme_headers
x_forwarded_for_header = cfg.x_forwarded_for_header
if client and client[0] not in cfg.forwarded_allow_ips:
if '*' not in cfg.forwarded_allow_ips and client\
and client[0] not in cfg.forwarded_allow_ips:
x_forwarded_for_header = None
secure_headers = {}