Setting trusted_hosts and accessing request.host as cached property

[septatrix]

I noticed that request.host is a cached property so setting trusted_hosts after it was accessed the first time has no effect. Where should trusted_hosts be ideally assigned to ensure correct behavior?

[davidism]

The host property is cached per request object. There is a new request object for each request, so the cached property from one request doesn't affect another. If you want to set a global default, you'd set the Request.trusted_hosts class attribute. If you want to override it for a specific request, you'd set it early in the request handling before accessing host. Cached properties can also be deleted to reset them.