search

esnet-security / SCRAM

Security Catch and Release Automation Manager
Other
5 stars 0 forks source link

fix(django-process_expired): add django container by name to allowed_hosts in local dev env #3

Closed samoehlert closed 1 year ago

samoehlert commented 1 year ago

It was still working, but showing lots of scary looking errors when we ran process_expired without that.

samoehlert commented 1 year ago

Could this accidentally allow any host on the network that also resolves to 'django'?

I believe it would have to be in the internal to docker network that lives between containers and does DNS. That being said this just allows access to the webserver and is only in the local environment, so I don't see danger here.