Details
-
Type:
Bug
-
Status: Resolved
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 3.11.0
-
Fix Version/s: 4.0.0
-
Component/s: core.users
-
Labels:None
-
Target Version:
Description
Currently we are getting support issues as HUE in following configuration generates "400 Bad Request" error.
1. When HUE's django server started on IP:PORT
e.g. hue runserver IP:PORT
2. When HUE is hosted on AWS(with ec2 domain name) and clients are coming from different domain names
In above cases if default HUE setting is "allowed_hosts=[".domainname"]" which can created DOS(denial of service) from HUE.
When default setting is changed to allowed_hosts=["*"] above DOS can be prevented.
Also with this user can still put "allowed_hosts" settings and HUE will reflect it.