benoitc/gunicorn — pull request #383 by sirkonst (2012-07-24 14:37:44+00:00)
Title: Forwarded allow ips

Added forwarded_allow_ips option for restricted fronends who can send valid X-Forwarded-* headers. By default allow from 127.0.0.1.

Reason: any request can set REMOTE_ADDR by X-Forwarded-For header and change wsgi.url_scheme - it's security issue.

Also it's linked with https://github.com/benoitc/gunicorn/issues/281