Closed wowkin2 closed 6 years ago
I found that in core module: config['ALLOWED_HOSTS'] = ['*'] And that is not good for security. You should read domain info somewhere from Heroku or explicitly set from settings.py.
no, this is fine on heroku. heroku only allows requests from allowed domains to your application.
I found that in core module: config['ALLOWED_HOSTS'] = ['*'] And that is not good for security. You should read domain info somewhere from Heroku or explicitly set from settings.py.