Requests accepted by localhost and 127.0.0.1 by default

PegaSysEng · Feb 27, 2019 · 89fa576 · 89fa576
1 parent 5c55983
commit 89fa576
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 5 deletions.
diff --git a/docs/JSON-RPC-API/Using-JSON-RPC-API.md b/docs/JSON-RPC-API/Using-JSON-RPC-API.md
@@ -37,10 +37,7 @@ options to specify the port on which the JSON-RPC listens. The default ports are
 
 To prevent DNS rebinding, incoming HTTP requests and WebSockets connections are only accepted from hostnames 
 specified using the [`--host-whitelist`](../Reference/Pantheon-CLI-Syntax.md#host-whitelist) option. 
-The default value for `--host-whitelist` is localhost.
-
-If using the URL `http://127.0.0.1` to make JSON-RPC calls or connect to WebSockets, use `--host-whitelist` 
-to specify the hostname `127.0.0.1` or update the hostname in the JSON-RPC call or WebSockets connection to `localhost`.
+By default, `localhost` and `127.0.0.1` are accepted.
 
 If your application publishes RPC ports, specify the hostnames when starting Pantheon.
 

diff --git a/docs/Reference/Pantheon-CLI-Syntax.md b/docs/Reference/Pantheon-CLI-Syntax.md
@@ -164,7 +164,7 @@ host-whitelist=["medomain.com", "meotherdomain.com"]
 ```
 
 Comma-separated list of hostnames to allow [access to the JSON-RPC API](../JSON-RPC-API/Using-JSON-RPC-API.md#host-whitelist). 
-Default is `localhost`. 
+By default, access from `localhost` and `127.0.0.1` is accepted. 
 
 !!!tip
     To allow all hostnames, use `*` or `all`. We don't recommend allowing all hostnames for production code.