Private
Public Access
1
0
This commit is contained in:
Sander Roosendaal
2020-02-16 17:04:41 +01:00
parent 62781ad8a7
commit ac9c0e6f5c

View File

@@ -4406,7 +4406,7 @@ def workout_upload_api(request):
# only allow local host
hostt = request.get_host().split(':')
if hostt[0] not in ['localhost','127.0.0.1']:
if hostt[0] not in ['localhost','127.0.0.1','dev.rowsandall.com','rowsandall.com']:
message = {'status':'false','message':'permission denied for host '+hostt[0]}
return JSONResponse(status=403,data=message)