title: Django ALLOWED_HOSTS: OK to include 'localhost' on a deployed settings file?
body: <p>I'm working in Django 1.8. I have set <code>ALLOWED_HOSTS</code> as follows, in both my local and deployed settings:</p>
  
  <pre><code>ALLOWED_HOSTS = ['localhost', 'my.deployed.url']
  </code></pre>
  
  <p>That way I don't need to change the settings in the deployed version. (Not that this is difficult to do, it's just convenient this way.)</p>
  
  <p>Is there any security reason why I shouldn't have <code>localhost</code> there on the deployed settings on the remote server?</p>
  
  <p><a href="https://docs.djangoproject.com/en/1.8/ref/settings/#allowed-hosts">From the docs I don't think there is</a>, but just wanted to check. </p>