improve robustness of host comparision for wss:// Origin headers

see: https://github.com/ansible/tower/issues/2647
This commit is contained in:
Ryan Petrello
2018-07-24 11:28:43 -04:00
parent c0da6f04cd
commit 4b3ca080d4
4 changed files with 84 additions and 3 deletions

View File

@@ -166,6 +166,11 @@ REMOTE_HOST_HEADERS = ['REMOTE_ADDR', 'REMOTE_HOST']
# REMOTE_HOST_HEADERS will be trusted unconditionally')
PROXY_IP_WHITELIST = []
# If Tower is behind a reverse proxy/load balancer, use this setting
# to whitelist hostnames which represent trusted Origin hostnames from which
# Tower should allow websocket connections.
WEBSOCKET_ORIGIN_WHITELIST = []
# Note: This setting may be overridden by database settings.
STDOUT_MAX_BYTES_DISPLAY = 1048576