Tighten ALLOWED_HOSTS
The Tlamatini security report flagged the default ALLOWED_HOSTS=['*']
in Tlamatini/tlamatini/settings.py as one of the Tlamatini-specific
debts. This skill replaces it with a user-supplied whitelist and writes
a .bak backup next to the file.
Procedure
- Read
Tlamatini/tlamatini/settings.py. - Locate the line
ALLOWED_HOSTS = [...](any list literal). - Backup the current file as
settings.py.bak. - Rewrite
ALLOWED_HOSTSwith${input.hosts}rendered as a Python list. - Return
{settings_path, backup_path, changed}.
Rollback
If the new list is incorrect, restore settings.py.bak over settings.py
manually.