Originally reported by: lrowe (Bitbucket: lrowe, GitHub: lrowe)
I like to restrict installation to pypi, but sometimes I need to use a particular tag tarball from a personal fork of a package. Currently that requires adding "github.com" to allow-hosts, which is far too broad.
It looks like this could be achieved by populating a set of always allowed urls in add_find_links which would be okayed by url_ok regardless of the configured allowed hosts (as 'file' scheme urls are.)
(I'm using buildout, but digging into the code it looks like the underlying issue is from setuptools.)
Originally reported by: lrowe (Bitbucket: lrowe, GitHub: lrowe)
I like to restrict installation to pypi, but sometimes I need to use a particular tag tarball from a personal fork of a package. Currently that requires adding "github.com" to allow-hosts, which is far too broad.
It looks like this could be achieved by populating a set of always allowed urls in
add_find_linkswhich would be okayed byurl_okregardless of the configured allowed hosts (as 'file' scheme urls are.)(I'm using buildout, but digging into the code it looks like the underlying issue is from setuptools.)