ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-11-09 04:38:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(api): sign report URLs against public storage host (#12552)

Browse Source
This commit is contained in:
Pedro Martín authored and GitHub committed 2026-09-18 10:16:13 +02:00
1 parent 07d48ab15d
commit 6c8d6994bb
8 files changed
+226 -4
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

api/src/backend/config/django/base.py
+5
View File
@@ -295,6 +295,11 @@ DJANGO_OUTPUT_S3_AWS_SECRET_ACCESS_KEY = env.str(
)
DJANGO_OUTPUT_S3_AWS_SESSION_TOKEN = env.str("DJANGO_OUTPUT_S3_AWS_SESSION_TOKEN", "")
DJANGO_OUTPUT_S3_AWS_DEFAULT_REGION = env.str("DJANGO_OUTPUT_S3_AWS_DEFAULT_REGION", "")
# Browser-reachable storage host used to sign download URLs. Empty means sign against the
# same endpoint the API talks to, which is what Prowler Cloud on S3 does.
DJANGO_OUTPUT_S3_AWS_PUBLIC_ENDPOINT_URL = env.str(
"DJANGO_OUTPUT_S3_AWS_PUBLIC_ENDPOINT_URL", ""
)
# HTTP Security Headers
SECURE_CONTENT_TYPE_NOSNIFF = True