This commit is contained in:
PCoder 2020-02-29 15:53:46 +05:30
parent c516086d12
commit 9de6a2e57d

View file

@ -75,10 +75,7 @@ WARNINGS:
```
## Other security configurations for Django
What are the various security parameters ? https://django-secure.readthedocs.io/en/latest/settings.html
## Actions to take for the warnings above and as per the recommendations in the settings page https://django-secure.readthedocs.io/en/latest/settings.html
1. Django's way to protect the project against XSS is to enable the following values
@ -92,7 +89,6 @@ SECURE_BROWSER_XSS_FILTER = True
SECURE_CONTENT_TYPE_NOSNIFF = True
```
2. SSL and HSTS
Force/exempt ssl urls