diff options
| author | Expo on server <expo@expo.survex.com> | 2022-10-09 00:32:26 +0100 |
|---|---|---|
| committer | Expo on server <expo@expo.survex.com> | 2022-10-09 00:32:26 +0100 |
| commit | 235bd86af37c6b5be5aa404ac4228051273f50cb (patch) | |
| tree | 8c3e2984931e5531124f40372be352b129f38de9 /security-warnings.txt | |
| parent | e6ca20b1eda8c6d074dd698c0e1c64b24e86a4c1 (diff) | |
| download | troggle-235bd86af37c6b5be5aa404ac4228051273f50cb.tar.gz troggle-235bd86af37c6b5be5aa404ac4228051273f50cb.tar.bz2 troggle-235bd86af37c6b5be5aa404ac4228051273f50cb.zip | |
./pre-run.sh does not fixup git work
Diffstat (limited to 'security-warnings.txt')
| -rw-r--r-- | security-warnings.txt | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/security-warnings.txt b/security-warnings.txt index c9c248e..236f7c9 100644 --- a/security-warnings.txt +++ b/security-warnings.txt @@ -1,8 +1,8 @@ System check identified some issues: WARNINGS: +?: (admin.W411) 'django.template.context_processors.request' must be enabled in DjangoTemplates (TEMPLATES) in order to use the admin navigation sidebar. ?: (security.W001) You do not have 'django.middleware.security.SecurityMiddleware' in your MIDDLEWARE so the SECURE_HSTS_SECONDS, SECURE_CONTENT_TYPE_NOSNIFF, SECURE_BROWSER_XSS_FILTER, SECURE_REFERRER_POLICY, and SECURE_SSL_REDIRECT settings will have no effect. -?: (security.W009) Your SECRET_KEY has less than 50 characters, less than 5 unique characters, or it's prefixed with 'django-insecure-' indicating that it was generated automatically by Django. Please generate a long and random SECRET_KEY, otherwise many of Django's security-critical features will be vulnerable to attack. ?: (security.W012) SESSION_COOKIE_SECURE is not set to True. Using a secure-only session cookie makes it more difficult for network traffic sniffers to hijack user sessions. ?: (security.W016) You have 'django.middleware.csrf.CsrfViewMiddleware' in your MIDDLEWARE, but you have not set CSRF_COOKIE_SECURE to True. Using a secure-only CSRF cookie makes it more difficult for network traffic sniffers to steal the CSRF token. ?: (security.W018) You should not have DEBUG set to True in deployment. |