[Buildbot] #3181: allowed_origins default config does not work

[Buildbot trac]

#3181: allowed_origins default config does not work
--------------------+-------------------
Reporter:  tardyp   |      Owner:
    Type:  defect   |     Status:  new
Priority:  blocker  |  Milestone:  0.9.0
 Version:  master   |   Keywords:
--------------------+-------------------
 This is a recurrent issue for nine newcommers.

 Our XSS protection has no good enough default, and will refuse by default
 any incoming force build requests

 people are required to add  'allowed_origins':["*"] to their c['www']

--
Ticket URL: <http://trac.buildbot.net/ticket/3181>
Buildbot <http://buildbot.net/>
Buildbot: build/test automation