summaryrefslogtreecommitdiff
path: root/django/core/checks/security
Commit message (Expand)AuthorAgeFilesLines
* Refs #33526 -- Made CSRF_COOKIE_SECURE/SESSION_COOKIE_SECURE/SESSION_COOKIE_H...Mariusz Felisiak2022-02-212-15/+17
* Refs #33476 -- Refactored code to strictly match 88 characters line length.Mariusz Felisiak2022-02-071-2/+2
* Refs #33476 -- Reformatted code with Black.django-bot2022-02-073-78/+79
* Fixed #30360 -- Added support for secret key rotation.tschilling2022-02-011-14/+39
* Fixed #32678 -- Removed SECURE_BROWSER_XSS_FILTER setting.Tim Graham2021-04-301-3/+3
* Fixed #31840 -- Added support for Cross-Origin Opener Policy header.bankc2021-03-301-2/+25
* Refs #31842 -- Removed DEFAULT_HASHING_ALGORITHM transitional setting.Mariusz Felisiak2021-01-141-13/+0
* Refs #32311 -- Fixed CSRF_FAILURE_VIEW system check errors code.Hasan Ramezani2021-01-121-2/+2
* Fixed #32311 -- Added system check for CSRF_FAILURE_VIEW setting.Hasan Ramezani2021-01-121-1/+28
* Fixed #31757 -- Adjusted system check for SECRET_KEY to warn about autogenera...Artem Kosenko2020-11-111-5/+9
* Fixed #31842 -- Added DEFAULT_HASHING_ALGORITHM transitional setting.Mariusz Felisiak2020-08-041-0/+13
* Fixed #29324 -- Made SECRET_KEY validation lazy (on first access).Florian Apolloner2020-07-291-5/+10
* Fixed #29406 -- Added support for Referrer-Policy header.Nick Pope2019-09-091-4/+38
* Fixed #30426 -- Changed X_FRAME_OPTIONS setting default to DENY.Claude Paroz2019-09-091-3/+2
* Fixed #30680 -- Removed obsolete system check for SECURE_BROWSER_XSS_FILTER s...Adnan Umer2019-08-051-18/+0
* Capitalized SecurityMiddleware headers for consistency with other headers.Artur Juraszek2018-10-301-2/+2
* Refs #26601 -- Removed support for old-style middleware using settings.MIDDLE...Tim Graham2017-01-173-18/+11
* Fixed #27611 -- Doc'd that CSRF_COOKIE_HTTPONLY setting offers no security.Tim Graham2016-12-191-18/+0
* Refs #16859 -- Disabled CSRF_COOKIE_* checks when using CSRF_USE_SESSIONS.Raphael Michel2016-12-171-0/+2
* Fixed E305 flake8 warnings.Ramin Farajpour Cami2016-11-141-0/+1
* Refs #26947 -- Added a deployment system check for SECURE_HSTS_PRELOAD.Ed Morley2016-08-101-0/+16
* Fixed #26601 -- Improved middleware per DEP 0005.Florian Apolloner2016-05-173-21/+27
* Fixed #24966 -- Added deployment system check for empty ALLOWED_HOSTS.rroskam2015-07-151-0/+10
* Sorted imports with isort; refs #23860.Tim Graham2015-02-063-5/+3
* Fixed #17101 -- Integrated django-secure and added check --deploy optionTim Graham2014-09-124-0/+339