Mercurial > p > roundup > code
comparison roundup/configuration.py @ 6688:f1f2d59dab8b
Add allowed_api_origins to upgrading doc
In upgrading doc, also make upgrading config.ini a separate step.
Fix spelling error.
Also document * in allowed_api_origins in configuration.py.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Sun, 29 May 2022 22:37:36 -0400 |
| parents | 9ca5cbffa0c4 |
| children | 031996eb9bb5 |
comparison
equal
deleted
inserted
replaced
| 6687:c68739264869 | 6688:f1f2d59dab8b |
|---|---|
| 1212 used for the usual html URL's. These strings must match the | 1212 used for the usual html URL's. These strings must match the |
| 1213 value of the Origin header exactly. So 'https://bar.edu' and | 1213 value of the Origin header exactly. So 'https://bar.edu' and |
| 1214 'https://Bar.edu' are two different Origin values. Note that | 1214 'https://Bar.edu' are two different Origin values. Note that |
| 1215 the origin value is scheme://host. There is no path | 1215 the origin value is scheme://host. There is no path |
| 1216 component. So 'https://bar.edu/' would never be valid. | 1216 component. So 'https://bar.edu/' would never be valid. |
| 1217 Also the value * can be used to match any origin. Note that | |
| 1218 this setting allows any other web page to make requests against | |
| 1219 your roundup tracker and is not generally a good idea. | |
| 1217 | 1220 |
| 1218 You need to set these if you have a web application on a | 1221 You need to set these if you have a web application on a |
| 1219 different origin accessing your roundup instance. | 1222 different origin accessing your roundup instance. |
| 1220 | 1223 |
| 1221 (The origin from the tracker.web setting in config.ini is | 1224 (The origin from the tracker.web setting in config.ini is |