From 65e110304147fa4c19d9c6cc29e0f289e1465b4b Mon Sep 17 00:00:00 2001 From: Chris McDonough Date: Sat, 1 Nov 2008 19:26:08 +0000 Subject: - Change default paster template generator to use ``Paste#http`` server rather than ``PasteScript#cherrpy`` server. The cherrypy server has a security risk in it when ``REMOTE_USER`` is trusted by the downstream application. --- repoze/bfg/paster_template/+project+.ini_tmpl | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) (limited to 'repoze') diff --git a/repoze/bfg/paster_template/+project+.ini_tmpl b/repoze/bfg/paster_template/+project+.ini_tmpl index 2d6c4d0a2..311a2514a 100644 --- a/repoze/bfg/paster_template/+project+.ini_tmpl +++ b/repoze/bfg/paster_template/+project+.ini_tmpl @@ -6,7 +6,6 @@ use = egg:{{project}}#app reload_templates = true [server:main] -use = egg:PasteScript#cherrypy +use = egg:Paste#http host = 0.0.0.0 port = 6543 -numthreads = 4 -- cgit v1.2.3