diff --git a/notes.md b/notes.md index 9974f53..8f2dac8 100644 --- a/notes.md +++ b/notes.md @@ -75,10 +75,7 @@ WARNINGS: ``` - -## Other security configurations for Django - -What are the various security parameters ? https://django-secure.readthedocs.io/en/latest/settings.html +## Actions to take for the warnings above and as per the recommendations in the settings page https://django-secure.readthedocs.io/en/latest/settings.html 1. Django's way to protect the project against XSS is to enable the following values @@ -92,7 +89,6 @@ SECURE_BROWSER_XSS_FILTER = True SECURE_CONTENT_TYPE_NOSNIFF = True ``` - 2. SSL and HSTS Force/exempt ssl urls