[google-appengine] How to protect for Host Header Injection in Endpoints on AppEngine

2020-07-15 Thread Alexandru Gogan
Hi everyone, I'm seeing some odd behaviour with App Engine Flex and Cloud Endpoints that might be prone to Host Header Injection. If I send a request to the root domain of my API running on AppEngine Flex with Cloud Endpoints, with a specified HOST header, the content of the specified host is

Re: [google-appengine] Re: GAE Web app sending mail using SendGrid

2020-07-15 Thread Adam Jack
I don't know the background here, but in case any of this helps: Do you have an API key from SendGrid? https://app.sendgrid.com/settings/api_keys In your appengine-web.xml set the environment variable to pass that API key into:

Re: [google-appengine] Re: GAE Web app sending mail using SendGrid

2020-07-15 Thread Alexis CAPGEMINI
Can you please explain how you did this ? I'm still stuck with an error here : SendGrid sendgrid = new SendGrid( System.getenv("SENDGRID_SENDER")); Thanks Le vendredi 7 septembre 2018 à 18:02:44 UTC+2, rashmi...@gmail.com a écrit : > I have solved the problem. I had to use Urlfetch

[google-appengine] Re: Google App Engine: versioning with custom sub domains

2020-07-15 Thread 'Alex Fox' via Google App Engine
Hey Alexander, This sounds like the functionality I want. Perhaps I need to experiment with a wild card certificate and avoid using the sub domains. Thanks, Alex On Tuesday, July 14, 2020 at 4:04:38 PM UTC+1 a.not...@gmail.com wrote: > Alex, > > We are doing just what you describe, although