<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/python-packages/waitress.git/waitress, branch proxy-updates</title>
<subtitle>github.com: Pylons/waitress.git
</subtitle>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/waitress.git/'/>
<entry>
<title>error if trusted_proxy_count is set without trusted_proxy</title>
<updated>2019-01-04T04:44:51+00:00</updated>
<author>
<name>Michael Merickel</name>
<email>michael@merickel.org</email>
</author>
<published>2019-01-04T04:44:51+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/waitress.git/commit/?id=f89b5f53be320c6f01cec808a6d1d40fe32f4ea2'/>
<id>f89b5f53be320c6f01cec808a6d1d40fe32f4ea2</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>simplify conditional when clearing untrusted headers</title>
<updated>2019-01-04T04:34:12+00:00</updated>
<author>
<name>Michael Merickel</name>
<email>michael@merickel.org</email>
</author>
<published>2019-01-04T04:34:12+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/waitress.git/commit/?id=7581a61f014bd9a04cf12ad64f0647e8f0e217da'/>
<id>7581a61f014bd9a04cf12ad64f0647e8f0e217da</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>allow clear_untrusted_proxy_headers when trusted_proxy is None</title>
<updated>2019-01-04T03:53:14+00:00</updated>
<author>
<name>Michael Merickel</name>
<email>michael@merickel.org</email>
</author>
<published>2019-01-04T03:52:33+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/waitress.git/commit/?id=865b421d4dbdcc3b6524b09e009dbe52fef56df1'/>
<id>865b421d4dbdcc3b6524b09e009dbe52fef56df1</id>
<content type='text'>
fixes #227
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
fixes #227
</pre>
</div>
</content>
</entry>
<entry>
<title>Only warn/fake bytes written if there is data</title>
<updated>2019-01-02T20:40:51+00:00</updated>
<author>
<name>Bert JW Regeer</name>
<email>bertjw@regeer.org</email>
</author>
<published>2019-01-02T20:40:51+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/waitress.git/commit/?id=180b0d85c47eeb940d86dbeb73e9e97d7d83afd3'/>
<id>180b0d85c47eeb940d86dbeb73e9e97d7d83afd3</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>changed any to * as any could potentially be a valid remote_peer</title>
<updated>2018-12-13T05:17:35+00:00</updated>
<author>
<name>Gerhard Schmidt</name>
<email>estartu@augusta.de</email>
</author>
<published>2018-12-13T05:17:35+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/waitress.git/commit/?id=e1a09524dc63f28064bc7da88a6ccfdf16878a63'/>
<id>e1a09524dc63f28064bc7da88a6ccfdf16878a63</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>added any as valid value for the trusted_proxy adjustable</title>
<updated>2018-12-12T07:48:02+00:00</updated>
<author>
<name>Gerhard Schmidt</name>
<email>estartu@augusta.de</email>
</author>
<published>2018-12-12T07:48:02+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/waitress.git/commit/?id=aa84b388177d6bda96e85542a6d14c1976d6dcfe'/>
<id>aa84b388177d6bda96e85542a6d14c1976d6dcfe</id>
<content type='text'>
Backgound is when waitress is running inside a container, any
request is originates from the gateway of the container network, not
from the outside ip. The container network changes every time the
container is restarted to a random new network number. So setting one
IP as trusted_proxy isn't possible but still needed as most of the time
an reverse proxy is between the client an the container. So if it's
ensured that only requests from the reverse proxy can reach the
container, trusting any host is not a problem.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Backgound is when waitress is running inside a container, any
request is originates from the gateway of the container network, not
from the outside ip. The container network changes every time the
container is restarted to a random new network number. So setting one
IP as trusted_proxy isn't possible but still needed as most of the time
an reverse proxy is between the client an the container. So if it's
ensured that only requests from the reverse proxy can reach the
container, trusting any host is not a problem.
</pre>
</div>
</content>
</entry>
<entry>
<title>clear untrusted headers if trusted_proxy is set but does not match</title>
<updated>2018-12-03T05:41:07+00:00</updated>
<author>
<name>Michael Merickel</name>
<email>michael@merickel.org</email>
</author>
<published>2018-12-03T04:43:10+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/waitress.git/commit/?id=d34190998d6190851915162198fc18d8e0f29940'/>
<id>d34190998d6190851915162198fc18d8e0f29940</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Try harder at getting the WSGI environ right</title>
<updated>2018-12-03T01:20:37+00:00</updated>
<author>
<name>Bert JW Regeer</name>
<email>bertjw@regeer.org</email>
</author>
<published>2018-12-03T01:19:08+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/waitress.git/commit/?id=8d531d6badd7173bb3ff23daa12de361f9ce7f28'/>
<id>8d531d6badd7173bb3ff23daa12de361f9ce7f28</id>
<content type='text'>
When facing the possibility of a proxy that is sending wacky values
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
When facing the possibility of a proxy that is sending wacky values
</pre>
</div>
</content>
</entry>
<entry>
<title>If no trusted_proxy, don't allow other variables</title>
<updated>2018-12-03T01:03:54+00:00</updated>
<author>
<name>Bert JW Regeer</name>
<email>bertjw@regeer.org</email>
</author>
<published>2018-12-03T01:00:41+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/waitress.git/commit/?id=7dd363f338886694896ad83950f9e799ff867054'/>
<id>7dd363f338886694896ad83950f9e799ff867054</id>
<content type='text'>
This way we don't accidentally mislead users into thinking those
settings are doing anything when they are not.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This way we don't accidentally mislead users into thinking those
settings are doing anything when they are not.
</pre>
</div>
</content>
</entry>
<entry>
<title>Define PROXY_HEADERS once</title>
<updated>2018-12-03T01:03:53+00:00</updated>
<author>
<name>Bert JW Regeer</name>
<email>bertjw@regeer.org</email>
</author>
<published>2018-12-02T23:59:01+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/waitress.git/commit/?id=89fe396a13e31db5692def5bcb253d85d5d5817f'/>
<id>89fe396a13e31db5692def5bcb253d85d5d5817f</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
</feed>
