summaryrefslogtreecommitdiffstats
path: root/settings.py
diff options
context:
space:
mode:
authorPhilip Sargent <philip.sargent@klebos.com>2021-03-22 02:26:46 +0000
committerPhilip Sargent <philip.sargent@klebos.com>2021-03-22 02:26:46 +0000
commita0f504d1e274ff4804aa6f376ef76267e55ed640 (patch)
tree66653582c2cf48c8d3cb04d60a3078d94d675d28 /settings.py
parent24bab23508196b7a91d94cd087a16ea1c19a25ae (diff)
downloadtroggle-a0f504d1e274ff4804aa6f376ef76267e55ed640.tar.gz
troggle-a0f504d1e274ff4804aa6f376ef76267e55ed640.tar.bz2
troggle-a0f504d1e274ff4804aa6f376ef76267e55ed640.zip
new self-adjusting paths
Diffstat (limited to 'settings.py')
-rw-r--r--settings.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/settings.py b/settings.py
index 545cf1f..df5268e 100644
--- a/settings.py
+++ b/settings.py
@@ -109,7 +109,7 @@ SECRET_KEY = "not-the-real-secret-key-a#vaeozn0---^fj!355qki*vj2"
LOGIN_REDIRECT_URL = '/'
SECURE_CONTENT_TYPE_NOSNIFF = True
SECURE_BROWSER_XSS_FILTER = True
-#SESSION_COOKIE_SECURE = True # if enabled, cannot login to Django control panel
+#SESSION_COOKIE_SECURE = True # if enabled, cannot login to Django control panel, bug elsewhere?
CSRF_COOKIE_SECURE = True
X_FRAME_OPTIONS = 'SAMEORIGIN' # change to "DENY" after we eliminate all the iframes e.g. /xmlvalid.html