Skip to content

Hardening suggestions for django-twitter / 32-redis-install#50

Open
pixeebot[bot] wants to merge 2 commits into
32-redis-installfrom
pixeebot/32-redis-install
Open

Hardening suggestions for django-twitter / 32-redis-install#50
pixeebot[bot] wants to merge 2 commits into
32-redis-installfrom
pixeebot/32-redis-install

Conversation

@pixeebot

@pixeebot pixeebot Bot commented Jun 11, 2024

Copy link
Copy Markdown

I've reviewed the recently opened PR (49 - redis) and have identified some area(s) that could benefit from additional hardening measures.

These changes should help prevent potential security vulnerabilities and improve overall code quality.

Thank you for your consideration!
🧚🤖 Powered by Pixeebot

Feedback | Community | Docs

@pixeebot pixeebot Bot requested a review from taoerman June 11, 2024 23:13
Comment thread twitter/settings.py

# SECURITY WARNING: don't run with debug turned on in production!
DEBUG = True
DEBUG = False

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Flip Django debug flag to off.

Comment thread twitter/settings.py
from .local_settings import *
except:
pass
SESSION_COOKIE_SECURE = True

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sets Django's SESSION_COOKIE_SECURE flag if off or missing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants