Comment 9 for bug 1606500

Revision history for this message
Matthias Runge (mrunge) wrote : Re: Heat: template source URL allows network port scan

This is a general issue. You probably don't want your horizon host to spoof your network.
In any case, you probably don't want to expose the information of running services in the internal network.

If I'm not mistaken, Horizon strictly uses the heat api, and does not connect to the resource itself.