python - DisallowedRedirect:使用协议“127.0.0.1”不安全重定向到 URL
问题描述
我试图让我的 Django 应用程序运行,并在我的所有端点(根端点除外)处遇到以下错误:
DisallowedRedirect at /coffeeshop/items
Unsafe redirect to URL with protocol '127.0.0.1'
服务器日志说:
Unsafe redirect to URL with protocol '127.0.0.1'
Bad Request: 127.0.0.1:80/myapp/items
[01/Jun/2020 16:12:36] "GET /myapp/items HTTP/1.1" 400 65131
这是myapp/items
视图:
class ItemViewSet(ReadOnlyModelViewSet):
model = Item
queryset = Item.objects.all()
serializer_class = ItemSerializer
filter_backends = (filters.DjangoFilterBackend,)
filterset_class = ItemFilterSet
服务器在http://127.0.0.1:8000/上运行,我没有尝试在我的任何视图中重定向任何内容。从日志中可以看出,服务器尝试将请求重定向到:80
端口,我不明白为什么。
这也是我的设置文件,供参考(可能有我看不到的问题):
ALLOWED_HOSTS = [
'localhost',
'localhost:3000',
'127.0.0.1',
'0.0.0.0'
]
# Application definition
INSTALLED_APPS = [
# 'jet_django',
'django.contrib.admin',
'django.contrib.auth',
'django.contrib.contenttypes',
'django.contrib.sessions',
'django.contrib.messages',
'django.contrib.staticfiles',
'myapp.apps.MyappConfig',
'rest_framework',
'phonenumber_field',
'django_filters',
'corsheaders',
]
MIDDLEWARE = [
'django.middleware.security.SecurityMiddleware',
'django.contrib.sessions.middleware.SessionMiddleware',
'corsheaders.middleware.CorsMiddleware',
'django.middleware.common.CommonMiddleware',
'django.middleware.csrf.CsrfViewMiddleware',
'django.contrib.auth.middleware.AuthenticationMiddleware',
'django.contrib.messages.middleware.MessageMiddleware',
'django.middleware.clickjacking.XFrameOptionsMiddleware',
]
ROOT_URLCONF = 'myapp.urls'
TEMPLATES = [
{
'BACKEND': 'django.template.backends.django.DjangoTemplates',
'DIRS': [os.path.join(BASE_DIR, 'templates')]
,
'APP_DIRS': True,
'OPTIONS': {
'context_processors': [
'django.template.context_processors.debug',
'django.template.context_processors.request',
'django.contrib.auth.context_processors.auth',
'django.contrib.messages.context_processors.messages',
],
},
},
]
WSGI_APPLICATION = 'myapp.wsgi.application'
# Database
# https://docs.djangoproject.com/en/3.0/ref/settings/#databases
DATABASES = {
"default": {
"ENGINE": "django.db.backends.postgresql",
"NAME": os.environ.get("POSTGRES_DB"),
"USER": os.environ.get("POSTGRES_USER"),
"PASSWORD": os.environ.get("POSTGRES_PASSWORD"),
"HOST": os.environ.get("POSTGRES_HOST"),
"PORT": os.environ.get("POSTGRES_PORT"),
}
}
# Password validation
# https://docs.djangoproject.com/en/3.0/ref/settings/#auth-password-validators
AUTH_PASSWORD_VALIDATORS = [
{
'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
},
{
'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
},
{
'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
},
{
'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
},
]
REST_FRAMEWORK = {
'DEFAULT_FILTER_BACKENDS': (
'django_filters.rest_framework.DjangoFilterBackend',
),
'DEFAULT_PAGINATION_CLASS': 'rest_framework.pagination.LimitOffsetPagination',
'PAGE_SIZE': 100
}
# Static files (CSS, JavaScript, Images)
# https://docs.djangoproject.com/en/3.0/howto/static-files/
STATIC_URL = '/static/'
STATIC_ROOT = os.path.join(BASE_DIR, "static/")
MEDIA_ROOT = os.path.join(STATIC_ROOT, 'media')
MEDIA_URL = '/media/'
# CORS
CORS_ALLOW_METHODS = ('DELETE', 'GET', 'PATCH', 'POST', 'PUT')
CORS_ORIGIN_WHITELIST = (
'http://localhost',
'http://127.0.0.1',
)
CORS_ALLOW_CREDENTIALS = True
解决方案
推荐阅读
- python - 如何通过标签获取所有元素?
- angular - 显式指定材质下拉选择的类型而不是动态
- geospatial - 可以使用空间索引加速“单个几何内的点”查询吗?
- android - 刷新小部件上的现有数据
- excel - 跨工作表的 Excel VBA 克隆(命名)表
- clojure - clj-http 异常:ExceptionInfo clj-http: 状态 415 clj-http.client/wrap-exceptions/fn--1863 (client.clj:196)
- amazon-web-services - AWS - 使用 EC2 实例的 FailedInvocations
- php - 在 PHP 中从数组创建多维树对象
- ruby-on-rails - 如何集成 Google Places gem 以获取 Google 评论
- linux - Qt:有时在旋转鼠标滚轮时不会立即调用wheelEvent()