settings.py: add more security settings
This commit is contained in:
@ -22,7 +22,22 @@ FRONTEND_DIR = os.path.join(BASE_DIR, 'cateditor')
|
|||||||
# bring in ansible-defined settings
|
# bring in ansible-defined settings
|
||||||
from .settings_ansible import *
|
from .settings_ansible import *
|
||||||
|
|
||||||
|
# for 500 errors logging
|
||||||
|
ADMINS = [('Seth Ladygo', 'alx-admin@procatalog.io')]
|
||||||
|
|
||||||
|
# for broken link reporting
|
||||||
|
MANAGERS = [('Seth Ladygo', 'alx-admin@procatalog.io')]
|
||||||
|
|
||||||
|
# For deployment, see
|
||||||
|
# https://docs.djangoproject.com/en/2.1/howto/deployment/checklist/
|
||||||
|
|
||||||
|
# Security settings recommended by
|
||||||
|
# ./manage.py check --deploy
|
||||||
|
SECURE_CONTENT_TYPE_NOSNIFF = True
|
||||||
|
SECURE_BROWSER_XSS_FILTER = True
|
||||||
|
SESSION_COOKIE_SECURE = True
|
||||||
|
CSRF_COOKIE_SECURE = True
|
||||||
|
X_FRAME_OPTIONS = 'DENY'
|
||||||
|
|
||||||
LOGGING = {
|
LOGGING = {
|
||||||
'version': 1,
|
'version': 1,
|
||||||
|
|||||||
Reference in New Issue
Block a user