diff options
| -rw-r--r-- | tools/scan-view/ScanView.py | 4 | ||||
| -rwxr-xr-x | tools/scan-view/scan-view | 3 |
2 files changed, 7 insertions, 0 deletions
diff --git a/tools/scan-view/ScanView.py b/tools/scan-view/ScanView.py index 48b8cc80d0..2e06f2a8fb 100644 --- a/tools/scan-view/ScanView.py +++ b/tools/scan-view/ScanView.py @@ -492,6 +492,10 @@ File Bug</h3> return self.send_string(result) def send_head(self, fields=None): + if (self.server.options.onlyServeLocal and + self.client_address[0] != '127.0.0.1'): + return self.send_error('401', 'Unauthorized host.') + if fields is None: fields = {} self.fields = fields diff --git a/tools/scan-view/scan-view b/tools/scan-view/scan-view index 844a173ba6..06197465e6 100755 --- a/tools/scan-view/scan-view +++ b/tools/scan-view/scan-view @@ -93,6 +93,9 @@ def main(): parser.add_option("--no-browser", dest="startBrowser", default=True, action="store_false", help="Don't open a webbrowser on startup.") + parser.add_option("--allow-all-hosts", dest="onlyServeLocal", default=True, + action="store_false", + help='Allow connections from any host (access restricted to "127.0.0.1" by default)') (options, args) = parser.parse_args() if len(args) != 1: |