The_Great_Archive/ArchiveBox
1
0
Fork 0
mirror of https://github.com/ArchiveBox/ArchiveBox.git synced 2026-09-14 11:06:13 +05:00
Code Issues Actions Packages Projects Releases Wiki Activity

Allow API subdomain unsafe methods in auto mode

Browse Source
This commit is contained in:
Nick Sweeting 2026-07-25 18:37:32 -07:00
parent 8254f962ba
commit 93b5f6a6db
No known key found for this signature in database
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
archivebox/core/middleware.py
View File

@ -174,7 +174,9 @@ def ServerSecurityModeMiddleware(get_response):
if base_config.SERVER_SECURITY_MODE == "auto" and request.method.upper() not in allowed_methods:
request_host, _request_port = split_host_port((request.get_host() or "").lower())
base_host, _base_port = split_host_port(get_base_host(config=base_config))
if base_host and request_host != base_host:
api_host, _api_port = split_host_port(get_api_host(config=base_config))
control_hosts = {host for host in (base_host, api_host) if host}
if control_hosts and request_host not in control_hosts:
return HttpResponseForbidden("ArchiveBox is running with the control plane disabled on this host.")
from archivebox.config.common import get_request_config