summaryrefslogtreecommitdiffstats
path: root/security-warnings.txt
diff options
context:
space:
mode:
authorPhilip Sargent <philip.sargent@gmail.com>2024-12-12 17:08:00 +0000
committerPhilip Sargent <philip.sargent@gmail.com>2024-12-12 17:08:00 +0000
commit321f912083633417b7bc050f8c139fdfd724357e (patch)
tree7557a2ffdea3ac7fa932ddf4ece28423019abca7 /security-warnings.txt
parent58c9dd7d09b13acd99a4ce921401ce927f682f31 (diff)
downloadtroggle-321f912083633417b7bc050f8c139fdfd724357e.tar.gz
troggle-321f912083633417b7bc050f8c139fdfd724357e.tar.bz2
troggle-321f912083633417b7bc050f8c139fdfd724357e.zip
fixing pre-run script
Diffstat (limited to 'security-warnings.txt')
-rw-r--r--security-warnings.txt54
1 files changed, 10 insertions, 44 deletions
diff --git a/security-warnings.txt b/security-warnings.txt
index 1aa9a9f..90aef32 100644
--- a/security-warnings.txt
+++ b/security-warnings.txt
@@ -1,44 +1,10 @@
-Traceback (most recent call last):
- File "/home/philip/expo/troggle/manage.py", line 23, in <module>
- execute_from_command_line(sys.argv)
- ~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^
- File "/home/philip/expo/troggle/.venv/lib/python3.13/site-packages/django/core/management/__init__.py", line 442, in execute_from_command_line
- utility.execute()
- ~~~~~~~~~~~~~~~^^
- File "/home/philip/expo/troggle/.venv/lib/python3.13/site-packages/django/core/management/__init__.py", line 416, in execute
- django.setup()
- ~~~~~~~~~~~~^^
- File "/home/philip/expo/troggle/.venv/lib/python3.13/site-packages/django/__init__.py", line 24, in setup
- apps.populate(settings.INSTALLED_APPS)
- ~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^
- File "/home/philip/expo/troggle/.venv/lib/python3.13/site-packages/django/apps/registry.py", line 91, in populate
- app_config = AppConfig.create(entry)
- File "/home/philip/expo/troggle/.venv/lib/python3.13/site-packages/django/apps/config.py", line 123, in create
- mod = import_module(mod_path)
- File "/home/philip/.local/share/uv/python/cpython-3.13.1-linux-x86_64-gnu/lib/python3.13/importlib/__init__.py", line 88, in import_module
- return _bootstrap._gcd_import(name[level:], package, level)
- ~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
- File "<frozen importlib._bootstrap>", line 1387, in _gcd_import
- File "<frozen importlib._bootstrap>", line 1360, in _find_and_load
- File "<frozen importlib._bootstrap>", line 1331, in _find_and_load_unlocked
- File "<frozen importlib._bootstrap>", line 935, in _load_unlocked
- File "<frozen importlib._bootstrap_external>", line 1026, in exec_module
- File "<frozen importlib._bootstrap>", line 488, in _call_with_frames_removed
- File "/home/philip/expo/troggle/.venv/lib/python3.13/site-packages/django/contrib/auth/apps.py", line 8, in <module>
- from .checks import check_middleware, check_models_permissions, check_user_model
- File "/home/philip/expo/troggle/.venv/lib/python3.13/site-packages/django/contrib/auth/checks.py", line 9, in <module>
- from .management import _get_builtin_permissions
- File "/home/philip/expo/troggle/.venv/lib/python3.13/site-packages/django/contrib/auth/management/__init__.py", line 10, in <module>
- from django.contrib.contenttypes.management import create_contenttypes
- File "/home/philip/expo/troggle/.venv/lib/python3.13/site-packages/django/contrib/contenttypes/management/__init__.py", line 2, in <module>
- from django.db import DEFAULT_DB_ALIAS, IntegrityError, migrations, router, transaction
- File "/home/philip/expo/troggle/.venv/lib/python3.13/site-packages/django/db/migrations/__init__.py", line 2, in <module>
- from .operations import * # NOQA
- ^^^^^^^^^^^^^^^^^^^^^^^^^
- File "/home/philip/expo/troggle/.venv/lib/python3.13/site-packages/django/db/migrations/operations/__init__.py", line 2, in <module>
- from .models import (
- ...<15 lines>...
- )
- File "/home/philip/expo/troggle/.venv/lib/python3.13/site-packages/django/db/migrations/operations/models.py", line 3, in <module>
- from django.db.migrations.state import ModelState
-ModuleNotFoundError: No module named 'django.db.migrations.state'
+System check identified some issues:
+
+WARNINGS:
+?: (security.W001) You do not have 'django.middleware.security.SecurityMiddleware' in your MIDDLEWARE so the SECURE_HSTS_SECONDS, SECURE_CONTENT_TYPE_NOSNIFF, SECURE_REFERRER_POLICY, SECURE_CROSS_ORIGIN_OPENER_POLICY, and SECURE_SSL_REDIRECT settings will have no effect.
+?: (security.W009) Your SECRET_KEY has less than 50 characters, less than 5 unique characters, or it's prefixed with 'django-insecure-' indicating that it was generated automatically by Django. Please generate a long and random value, otherwise many of Django's security-critical features will be vulnerable to attack.
+?: (security.W012) SESSION_COOKIE_SECURE is not set to True. Using a secure-only session cookie makes it more difficult for network traffic sniffers to hijack user sessions.
+?: (security.W016) You have 'django.middleware.csrf.CsrfViewMiddleware' in your MIDDLEWARE, but you have not set CSRF_COOKIE_SECURE to True. Using a secure-only CSRF cookie makes it more difficult for network traffic sniffers to steal the CSRF token.
+?: (security.W018) You should not have DEBUG set to True in deployment.
+
+System check identified 5 issues (0 silenced).