oci/zeronet
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Only allow UI requests from safe hosts

Browse source
This commit is contained in:
shortcutme 2017-06-13 14:19:23 +02:00
parent d55fbd1728
commit 42874038e2
No known key found for this signature in database
GPG key ID: 5B63BAE6CB9613AE
2 changed files with 27 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/Ui/UiServer.py
View file

@ -58,6 +58,8 @@ class UiServer:
self.port = config.ui_port
if self.ip == "*":
self.ip = "" # Bind all
self.allowed_hosts = set(["zero", "localhost:%s" % config.ui_port, "%s:%s" % (config.ui_ip, config.ui_port)])
self.learn_allowed_host = True
self.wrapper_nonces = []
self.site_manager = SiteManager.site_manager
self.sites = SiteManager.site_manager.list()