Hynek Schlawack21h ago

speaking of Sentry: y'all might want to add a "werkzeug!=3.1.7" pin if you run Werkzeug (maybe via Flask) in a cluster with weird hostnames:

https://github.com/pallets/werkzeug/issues/3141

3.1.7 version introduces a BC break in host validation · Issue #3141 · pallets/werkzeug

A feature to validate host http header no matter what introduces backwards compatibility break. The bug presents itself by regarding the host invalid (false-positive) A host like 069ef83c8f81497b8e...

GitHub
Show threadDavid Lord 19h ago
@hynek what I'm not clear on is how Django has been doing this same check for 15 years. People must be deploying Django on AWS.
Show threadHynek Schlawack
@davidism maybe nobody is running Django in production 🤡
Mar 25 at 2:40pmMona for Mac
Show threadCarlton Gibson18h ago
@hynek @davidism Now now hynek.
Show threadTin Tvrtković17h ago
@carlton @hynek @davidism 🍿🍿