#6548: django behind apache ssl proxy
--------------------------------------------------------------+-------------
               Reporter:  laureline.guerin@…                  |         Owner:  
nobody
                 Status:  closed                              |     Milestone:  
      
              Component:  HTTP handling                       |       Version:  
SVN   
             Resolution:  duplicate                           |      Keywords:  
      
           Triage Stage:  Design decision needed              |     Has patch:  
0     
    Needs documentation:  0                                   |   Needs tests:  
0     
Patch needs improvement:  0                                   |  
--------------------------------------------------------------+-------------
Changes (by aaugustin):

  * status:  new => closed
  * resolution:  => duplicate


Comment:

 This is a duplicate of #6880. The issue in both tickets is that Django
 tries to perform some magic by using the non-standard (and insecure) X
 -Forwarded-For header, and that breaks redirects.

 The latest patch for #6880 implements the first option offered by the OP:
 remove test for X-FORWARDED-HOST in get_host.

-- 
Ticket URL: <http://code.djangoproject.com/ticket/6548#comment:6>
Django <http://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-updates@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Reply via email to