diff options
author | Philip Sargent <philip.sargent@gmail.com> | 2025-06-21 20:10:04 +0300 |
---|---|---|
committer | Philip Sargent <philip.sargent@gmail.com> | 2025-06-21 20:10:43 +0300 |
commit | 576e4a20f0ebb3364fda255d69b360117ecfd952 (patch) | |
tree | 681a0175fee22c3fae0a7b878c2aeb26a69e269a /security-warnings.txt | |
parent | 6e3279e5852a664b70ad331e8595ed9c6cdd4176 (diff) | |
download | troggle-576e4a20f0ebb3364fda255d69b360117ecfd952.tar.gz troggle-576e4a20f0ebb3364fda255d69b360117ecfd952.tar.bz2 troggle-576e4a20f0ebb3364fda255d69b360117ecfd952.zip |
extract heights.json and fix manage.py to use uv
Diffstat (limited to 'security-warnings.txt')
-rw-r--r-- | security-warnings.txt | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/security-warnings.txt b/security-warnings.txt index 90aef32..a2802f0 100644 --- a/security-warnings.txt +++ b/security-warnings.txt @@ -1,10 +1,10 @@ +Reading inline script metadata from `manage.py` System check identified some issues: WARNINGS: ?: (security.W001) You do not have 'django.middleware.security.SecurityMiddleware' in your MIDDLEWARE so the SECURE_HSTS_SECONDS, SECURE_CONTENT_TYPE_NOSNIFF, SECURE_REFERRER_POLICY, SECURE_CROSS_ORIGIN_OPENER_POLICY, and SECURE_SSL_REDIRECT settings will have no effect. -?: (security.W009) Your SECRET_KEY has less than 50 characters, less than 5 unique characters, or it's prefixed with 'django-insecure-' indicating that it was generated automatically by Django. Please generate a long and random value, otherwise many of Django's security-critical features will be vulnerable to attack. ?: (security.W012) SESSION_COOKIE_SECURE is not set to True. Using a secure-only session cookie makes it more difficult for network traffic sniffers to hijack user sessions. ?: (security.W016) You have 'django.middleware.csrf.CsrfViewMiddleware' in your MIDDLEWARE, but you have not set CSRF_COOKIE_SECURE to True. Using a secure-only CSRF cookie makes it more difficult for network traffic sniffers to steal the CSRF token. ?: (security.W018) You should not have DEBUG set to True in deployment. -System check identified 5 issues (0 silenced). +System check identified 4 issues (0 silenced). |