From a0f504d1e274ff4804aa6f376ef76267e55ed640 Mon Sep 17 00:00:00 2001 From: Philip Sargent Date: Mon, 22 Mar 2021 02:26:46 +0000 Subject: new self-adjusting paths --- settings.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'settings.py') diff --git a/settings.py b/settings.py index 545cf1f..df5268e 100644 --- a/settings.py +++ b/settings.py @@ -109,7 +109,7 @@ SECRET_KEY = "not-the-real-secret-key-a#vaeozn0---^fj!355qki*vj2" LOGIN_REDIRECT_URL = '/' SECURE_CONTENT_TYPE_NOSNIFF = True SECURE_BROWSER_XSS_FILTER = True -#SESSION_COOKIE_SECURE = True # if enabled, cannot login to Django control panel +#SESSION_COOKIE_SECURE = True # if enabled, cannot login to Django control panel, bug elsewhere? CSRF_COOKIE_SECURE = True X_FRAME_OPTIONS = 'SAMEORIGIN' # change to "DENY" after we eliminate all the iframes e.g. /xmlvalid.html -- cgit v1.2.3