The ALLOWED_HOSTS setting has been reworked a bit — it is now a required setting for deployment, and enforced on EVERY request

You can also now use IP address CIDR notation to allow a range of IPs! Pretty useful in some environments