From 9de6a2e57d447df1d25dacacdbee13b339f489e3 Mon Sep 17 00:00:00 2001 From: PCoder Date: Sat, 29 Feb 2020 15:53:46 +0530 Subject: [PATCH] Rephrase --- notes.md | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/notes.md b/notes.md index 9974f53..8f2dac8 100644 --- a/notes.md +++ b/notes.md @@ -75,10 +75,7 @@ WARNINGS: ``` - -## Other security configurations for Django - -What are the various security parameters ? https://django-secure.readthedocs.io/en/latest/settings.html +## Actions to take for the warnings above and as per the recommendations in the settings page https://django-secure.readthedocs.io/en/latest/settings.html 1. Django's way to protect the project against XSS is to enable the following values @@ -92,7 +89,6 @@ SECURE_BROWSER_XSS_FILTER = True SECURE_CONTENT_TYPE_NOSNIFF = True ``` - 2. SSL and HSTS Force/exempt ssl urls