diff options
| author | Philip Sargent <philip.sargent@klebos.com> | 2021-03-25 16:15:58 +0000 |
|---|---|---|
| committer | Philip Sargent <philip.sargent@klebos.com> | 2021-03-25 16:15:58 +0000 |
| commit | 80874887cc78010dac35e0abb7a7cff25f37c909 (patch) | |
| tree | a38be8947addbaf90267a8993d73c1c3ed57f01b /security-warnings.txt | |
| parent | 8723d62addda7200e26bd20c6aafb1532d1f832c (diff) | |
| download | troggle-80874887cc78010dac35e0abb7a7cff25f37c909.tar.gz troggle-80874887cc78010dac35e0abb7a7cff25f37c909.tar.bz2 troggle-80874887cc78010dac35e0abb7a7cff25f37c909.zip | |
404 fix attempt
Diffstat (limited to 'security-warnings.txt')
| -rw-r--r-- | security-warnings.txt | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/security-warnings.txt b/security-warnings.txt index 775e519..ee3c723 100644 --- a/security-warnings.txt +++ b/security-warnings.txt @@ -2,9 +2,13 @@ System check identified some issues: WARNINGS: ?: (security.W004) You have not set a value for the SECURE_HSTS_SECONDS setting. If your entire site is served only over SSL, you may want to consider setting a value and enabling HTTP Strict Transport Security. Be sure to read the documentation first; enabling HSTS carelessly can cause serious, irreversible problems. + ?: (security.W008) Your SECURE_SSL_REDIRECT setting is not set to True. Unless your site should be available over both SSL and non-SSL connections, you may want to either set this setting True or configure a load balancer or reverse-proxy server to redirect all connections to HTTPS. + ?: (security.W012) SESSION_COOKIE_SECURE is not set to True. Using a secure-only session cookie makes it more difficult for network traffic sniffers to hijack user sessions. + ?: (security.W018) You should not have DEBUG set to True in deployment. + ?: (security.W019) You have 'django.middleware.clickjacking.XFrameOptionsMiddleware' in your MIDDLEWARE_CLASSES, but X_FRAME_OPTIONS is not set to 'DENY'. The default is 'SAMEORIGIN', but unless there is a good reason for your site to serve other parts of itself in a frame, you should change it to 'DENY'. System check identified 5 issues (0 silenced). |