This commit is contained in:
PCoder 2020-02-29 15:53:46 +05:30
parent c516086d12
commit 9de6a2e57d

View file

@ -75,10 +75,7 @@ WARNINGS:
``` ```
## Actions to take for the warnings above and as per the recommendations in the settings page https://django-secure.readthedocs.io/en/latest/settings.html
## Other security configurations for Django
What are the various security parameters ? https://django-secure.readthedocs.io/en/latest/settings.html
1. Django's way to protect the project against XSS is to enable the following values 1. Django's way to protect the project against XSS is to enable the following values
@ -92,7 +89,6 @@ SECURE_BROWSER_XSS_FILTER = True
SECURE_CONTENT_TYPE_NOSNIFF = True SECURE_CONTENT_TYPE_NOSNIFF = True
``` ```
2. SSL and HSTS 2. SSL and HSTS
Force/exempt ssl urls Force/exempt ssl urls