From 65e110304147fa4c19d9c6cc29e0f289e1465b4b Mon Sep 17 00:00:00 2001 From: Chris McDonough Date: Sat, 1 Nov 2008 19:26:08 +0000 Subject: - Change default paster template generator to use ``Paste#http`` server rather than ``PasteScript#cherrpy`` server. The cherrypy server has a security risk in it when ``REMOTE_USER`` is trusted by the downstream application. --- docs/narr/project.rst | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'docs/narr/project.rst') diff --git a/docs/narr/project.rst b/docs/narr/project.rst index c7f53a4e5..c117d906a 100644 --- a/docs/narr/project.rst +++ b/docs/narr/project.rst @@ -309,8 +309,8 @@ changes will not require an application restart to be detected. See The ``[server:main]`` section of the configuration file configures a WSGI server which listens on port 6543. It is configured to listen on -all interfaces (``0.0.0.0``), and is configured to use four threads -for our application. +all interfaces (``0.0.0.0``). The ``Paste#http`` server will create a +new thread for each request. .. note:: -- cgit v1.2.3