Split allowed host with comma

opendrift_leeway_webgui/core/settings.py

@@ -49,7 +49,7 @@
 #: This is a security measure to prevent HTTP Host header attacks, which are possible even under many seemingly-safe
 #: web server configurations (see :setting:`django:ALLOWED_HOSTS` and :ref:`django:host-headers-virtual-hosting`)
 ALLOWED_HOSTS = [".localhost", "127.0.0.1", "[::1]"] + [
-    x.strip() for x in os.environ.get("LEEWAY_ALLOWED_HOSTS", "").splitlines() if x
+    x.strip() for x in os.environ.get("LEEWAY_ALLOWED_HOSTS", "").split(",") if x
 ]
 
 #: Enabled applications (see :setting:`django:INSTALLED_APPS`)