Changes between Initial Version and Version 1 of Ticket #27379


Ignore:
Timestamp:
Oct 24, 2016, 11:18:10 AM (8 years ago)
Author:
Stavros Korokithakis
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #27379 – Description

    initial v1  
    1010This is a problem when a request comes in looking like:
    1111
     12{{{
    1213GET https://valid.hostname/ HTTP/1.1
    1314Host: invalid.hostname
     15}}}
    1416
    1517Django currently fails this as a violation of ALLOWED_HOSTS, but it shouldn't. Granted, we only see this in attacks, but nginx passes these requests through (because it should) and Django fails them because of the wonky host.
Back to Top