1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
==============
Version 4.4.13
==============
Version 4.4.13 of mod_wsgi can be obtained from:
https://codeload.github.com/GrahamDumpleton/mod_wsgi/tar.gz/4.4.13
For details on the availability of Windows binaries see:
https://github.com/GrahamDumpleton/mod_wsgi/tree/master/win32
Bugs Fixed
----------
1. The pip installable 'mod_wsgi' package was failing to install on
OpenShift and Heroku as ``mod_wsgi-apxs`` isn't used for tarball based
installs.
Features Changed
----------------
1. For ``mod_wsgi-express``, only the web server type is now shown in the
server tokens sent back in the ``Server`` response header. This prevents
users from knowing any specifics and thus using that to determine possible
vulnerabilities.
New Features
------------
1. Set environment variables from ``apachectl`` for ``mod_wsgi-express``
about the server environment which can be used in additional Apache
configuration included into the generated configuration. The environment
variables are:
* *MOD_WSGI_SERVER_ROOT* - This is the directory where the generated
configuration files, startup scripts, etc were placed.
* *MOD_WSGI_WORKING_DIRECTORY* - This is the directory which will be used
as the current working directory of the process. Would default to being
the same as ``MOD_WSGI_SERVER_ROOT`` if not overridden.
* *MOD_WSGI_LISTENER_HOST* - The host name or IP on which connections are
being accepted. This should only be used if the Apache configuration
variable ``MOD_WSGI_WITH_LISTENER_HOST`` is defined.
* *MOD_WSGI_HTTP_PORT* - The port on which HTTP connections are being accepted.
* *MOD_WSGI_HTTPS_PORT* - The port on which HTTPS connections are being
accepted. This should only be used if the Apache configuration variable
``MOD_WSGI_WITH_HTTPS`` is defined.
* *MOD_WSGI_MODULES_DIRECTORY* - The directory where the Apache modules are
installed.
* *MOD_WSGI_RUN_USER* - The user that the WSGI application will be run as.
* *MOD_WSGI_RUN_GROUP* - The group that the WSGI application will be run as.
2. Added ``X-Client-IP`` to list of possible trusted headers indicating the
true remote address of client when passing through a proxy.
|
