Alex Vandiver 738429cf77 middleware: Detect reverse proxy misconfigurations. ...

Combine nginx and Django middlware to stop putting misleading warnings
about `CSRF_TRUSTED_ORIGINS` when the issue is untrusted proxies.
This attempts to, in the error logs, diagnose and suggest next steps
to fix common proxy misconfigurations.

See also #24599 and zulip/docker-zulip#403.

(cherry picked from commit 8a77cca341)

2023-07-03 18:52:30 +00:00

..

jinja2

jinja2: Make sure that 500 pages have support_email set.

2023-04-12 16:41:07 -07:00

__init__.py

…

backends.py

test_helpers: Switch add/remove_ratelimit to a contextmanager.

2023-06-12 20:05:46 +00:00

computed_settings.py

middleware: Detect reverse proxy misconfigurations.

2023-07-03 18:52:30 +00:00

config.py

config: Remove Django base class from ZulipSettingsError.

2022-09-26 12:42:36 -07:00

configured_settings.py

ruff: Fix M001 Unused noqa directive.

2022-11-03 12:10:15 -07:00

default_settings.py

saml: Rework SP-initiated logout config to support IdP-level config.

2023-05-23 13:01:15 -07:00

dev_settings.py

error-bot: Remove ERROR_BOT support.

2023-04-13 14:59:58 -07:00

dev_urls.py

settings: Allow customization of STATIC_URL.

2023-02-14 17:17:06 -05:00

email_backends.py

email: Replace uri with url in templates and backend.

2023-04-26 16:37:16 -07:00

legacy_urls.py

legacy_urls: Add type annotation to legacy_urls.

2022-08-12 17:08:04 -07:00

prod_settings_template.py

prod_settings_template: Document REALM_HOSTS configuration.

2023-06-12 16:04:18 -04:00

prod_settings.pyi

lint: Replace pycodestyle and pyflakes with ruff.

2022-11-03 12:10:15 -07:00

sentry.py

puppet: Add a sentry release class.

2023-02-10 15:53:10 -08:00

settings_types.py

saml: Rework SP-initiated logout config to support IdP-level config.

2023-05-23 13:01:15 -07:00

settings.py

ruff: Fix M001 Unused noqa directive.

2022-11-03 12:10:15 -07:00

template_loaders.py

template_loaders: Extract TwoFactorLoader to new module.

2022-09-26 12:42:36 -07:00

test_extra_settings.py

zproject: Prevent having exactly 17/18 middlewares, for Python 3.11 bug.

2023-07-03 18:52:30 +00:00

test_settings.py

ruff: Fix M001 Unused noqa directive.

2022-11-03 12:10:15 -07:00

urls.py

uploads: Allow access to the /download/ variant anonymously.

2023-06-12 20:05:46 +00:00

wsgi.py

…