From f8b31dfdfc0cf6a516bcbc10c4e2f696ce3a9bda Mon Sep 17 00:00:00 2001 From: Joshua Pereyda Date: Tue, 29 Mar 2016 10:37:28 -0700 Subject: [PATCH] Fixed #26419 -- Added a link in ALLOWED_HOSTS docs. --- docs/ref/settings.txt | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/docs/ref/settings.txt b/docs/ref/settings.txt index 8aa702779a..010e942e43 100644 --- a/docs/ref/settings.txt +++ b/docs/ref/settings.txt @@ -65,9 +65,8 @@ See :doc:`/howto/error-reporting` for more information. Default: ``[]`` (Empty list) A list of strings representing the host/domain names that this Django site can -serve. This is a security measure to prevent an attacker from poisoning caches -and triggering password reset emails with links to malicious hosts by submitting -requests with a fake HTTP ``Host`` header, which is possible even under many +serve. This is a security measure to prevent :ref:`HTTP Host header attacks +`, which are possible even under many seemingly-safe web server configurations. Values in this list can be fully qualified names (e.g. ``'www.example.com'``),