Benoit Chesneau
Benoit Chesneau
I agree this should be an option. Using it as default will break some behaviors. I am also unsure why it's needed for a proxy, HTTP connections should be stateless...
Can you share the gunicorn logs also?
gunicorn itsel doesn't send the 404 so it's probably django. can you try yo log the paath it get?
> This renders Gunicorn vulnerable to request smuggling when used in conjunction with those servers. Which chain expose that ? Do you have any diagram ? Was it tested on...
WSGI applications must check there header to be safe. I don't see in the current example how an application could be in atatcked unless it's using an header like this....
please keep the topic title as is. We need to handle a new badly thought RFC that introduces this issue. This will be fixed.
I don't understand the use case. Can you provide an example? Why not simply add a hook executed when stopping?
related to #2884 I think we could have a generic way to allows the developer to define the behaviour when an instruction to stop Gunicorn is received. Let's keep the...
I should provide a way to bypass DNS resolution and allows the user to force the way it wants to make a connection. Also allow them to choose the preference...