Skip to content
This repository was archived by the owner on Jun 7, 2020. It is now read-only.
This repository was archived by the owner on Jun 7, 2020. It is now read-only.

Not all security settings suggested by Django's check --deploy command are enabled in production #27

Open
Open
Not all security settings suggested by Django's check --deploy command are enabled in production#27
Labels
security

Description

@yoowul
yoowul
opened on May 9, 2017

Security settings proposed by django's check --deploy flag:

secure_content_type_nosniff: True
secure_browser_xss_filter: True
session_cookie_secure: True
csrf_cookie_secure: True
csrf_cookie_httponly: True
x_frame_options: DENY

Currently the first four are set to False due to errors.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    security

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions