Mercurial > p > roundup > code
diff roundup/configuration.py @ 6688:f1f2d59dab8b
Add allowed_api_origins to upgrading doc
In upgrading doc, also make upgrading config.ini a separate step.
Fix spelling error.
Also document * in allowed_api_origins in configuration.py.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Sun, 29 May 2022 22:37:36 -0400 |
| parents | 9ca5cbffa0c4 |
| children | 031996eb9bb5 |
line wrap: on
line diff
--- a/roundup/configuration.py Sun May 29 13:47:45 2022 -0400 +++ b/roundup/configuration.py Sun May 29 22:37:36 2022 -0400 @@ -1214,6 +1214,9 @@ 'https://Bar.edu' are two different Origin values. Note that the origin value is scheme://host. There is no path component. So 'https://bar.edu/' would never be valid. +Also the value * can be used to match any origin. Note that +this setting allows any other web page to make requests against +your roundup tracker and is not generally a good idea. You need to set these if you have a web application on a different origin accessing your roundup instance.