archive/theorangeone.net-legacy
Archived
1
Fork 0
Code Releases Packages Activity

harden django

Browse source
This commit is contained in:
Jake Howard 2016-11-27 21:48:36 +00:00
parent b1f891d706
commit cb109219f0
Signed by: jake
GPG key ID: 57AFB45680EDD477
1 changed files with 9 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
project/settings.py
View file

@ -11,11 +11,17 @@ DEBUG = os.environ['DEBUG']
# SECURITY WARNING: keep the secret key used in production secret! # SECURITY WARNING: keep the secret key used in production secret!
SECRET_KEY = os.environ['SECRET_KEY'] SECRET_KEY = os.environ['SECRET_KEY']
EMAIL_BACKEND = 'django.core.mail.backends.console.EmailBackend' EMAIL_BACKEND = 'django.core.mail.backends.console.EmailBackend'
# Quick-start development settings - unsuitable for production SESSION_COOKIE_SECURE = True
# See https://docs.djangoproject.com/en/1.10/howto/deployment/checklist/ CSRF_COOKIE_SECURE = True
CSRF_COOKIE_HTTPONLY = True
MAX_UPLOAD_SIZE = 5242880 # 5MB - 5242880
SECURE_CONTENT_TYPE_NOSNIFF = True
SECURE_BROWSER_XSS_FILTER = True
SECURE_SSL_REDIRECT = True
X_FRAME_OPTIONS = 'DENY'
# Application definition # Application definition