index
:
delta/python-packages/django.git
1.8
15667
16682
24046
24215
24525
26176
3.2-man-page
4.0/make-zoneinfo-default-timezone-implementation-squashed
alex-patch-1
attic/boulder-oracle-sprint
attic/full-history
attic/generic-auth
attic/gis
attic/i18n
attic/magic-removal
attic/multi-auth
attic/multiple-db-support
attic/new-admin
attic/newforms-admin
attic/per-object-permissions
attic/queryset-refactor
attic/schema-evolution
attic/schema-evolution-ng
attic/search-api
attic/sqlalchemy
attic/unicode
c/29988-allow-f-strings
c/32409-async-tests-cannot-call-orm
c/append-slash-opt-out
c/replace-utcnow
c/use-bpo-extlink
dep0005
dep5
fix-cache-test
fix/remove-stray-file
issue/31570
link-to-code-of-conduct
main
make-zoneinfo-default-timezone-implementation
master
remove-unnecesary-if-wrap
selenium-updates
sir-sigurd-patch-1
soc2009/admin-ui
soc2009/http-wsgi-improvements
soc2009/i18n-improvements
soc2009/model-validation
soc2009/multidb
soc2009/test-improvements
soc2010/app-loading
soc2010/query-refactor
soc2010/test-refactor
stable/0.90.x
stable/0.91.x
stable/0.95.x
stable/0.96.x
stable/1.0.x
stable/1.1.x
stable/1.10.x
stable/1.11.x
stable/1.2.x
stable/1.3.x
stable/1.4.x
stable/1.5.x
stable/1.6.x
stable/1.7.x
stable/1.8.x
stable/1.9.x
stable/2.0.x
stable/2.1.x
stable/2.2.x
stable/3.0.x
stable/3.1.x
stable/3.2.x
stable/4.0.x
stable/4.1.x
stable/4.2.x
swap-closing-quote-period-in-admin-i18nable-literal
ticket-25055
ticket-31342
update-next-docs-version
github.com: django/django.git
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
django
/
core
/
checks
/
security
Commit message (
Expand
)
Author
Age
Files
Lines
*
Refs #33526 -- Made CSRF_COOKIE_SECURE/SESSION_COOKIE_SECURE/SESSION_COOKIE_H...
Mariusz Felisiak
2022-02-21
2
-15
/
+17
*
Refs #33476 -- Refactored code to strictly match 88 characters line length.
Mariusz Felisiak
2022-02-07
1
-2
/
+2
*
Refs #33476 -- Reformatted code with Black.
django-bot
2022-02-07
3
-78
/
+79
*
Fixed #30360 -- Added support for secret key rotation.
tschilling
2022-02-01
1
-14
/
+39
*
Fixed #32678 -- Removed SECURE_BROWSER_XSS_FILTER setting.
Tim Graham
2021-04-30
1
-3
/
+3
*
Fixed #31840 -- Added support for Cross-Origin Opener Policy header.
bankc
2021-03-30
1
-2
/
+25
*
Refs #31842 -- Removed DEFAULT_HASHING_ALGORITHM transitional setting.
Mariusz Felisiak
2021-01-14
1
-13
/
+0
*
Refs #32311 -- Fixed CSRF_FAILURE_VIEW system check errors code.
Hasan Ramezani
2021-01-12
1
-2
/
+2
*
Fixed #32311 -- Added system check for CSRF_FAILURE_VIEW setting.
Hasan Ramezani
2021-01-12
1
-1
/
+28
*
Fixed #31757 -- Adjusted system check for SECRET_KEY to warn about autogenera...
Artem Kosenko
2020-11-11
1
-5
/
+9
*
Fixed #31842 -- Added DEFAULT_HASHING_ALGORITHM transitional setting.
Mariusz Felisiak
2020-08-04
1
-0
/
+13
*
Fixed #29324 -- Made SECRET_KEY validation lazy (on first access).
Florian Apolloner
2020-07-29
1
-5
/
+10
*
Fixed #29406 -- Added support for Referrer-Policy header.
Nick Pope
2019-09-09
1
-4
/
+38
*
Fixed #30426 -- Changed X_FRAME_OPTIONS setting default to DENY.
Claude Paroz
2019-09-09
1
-3
/
+2
*
Fixed #30680 -- Removed obsolete system check for SECURE_BROWSER_XSS_FILTER s...
Adnan Umer
2019-08-05
1
-18
/
+0
*
Capitalized SecurityMiddleware headers for consistency with other headers.
Artur Juraszek
2018-10-30
1
-2
/
+2
*
Refs #26601 -- Removed support for old-style middleware using settings.MIDDLE...
Tim Graham
2017-01-17
3
-18
/
+11
*
Fixed #27611 -- Doc'd that CSRF_COOKIE_HTTPONLY setting offers no security.
Tim Graham
2016-12-19
1
-18
/
+0
*
Refs #16859 -- Disabled CSRF_COOKIE_* checks when using CSRF_USE_SESSIONS.
Raphael Michel
2016-12-17
1
-0
/
+2
*
Fixed E305 flake8 warnings.
Ramin Farajpour Cami
2016-11-14
1
-0
/
+1
*
Refs #26947 -- Added a deployment system check for SECURE_HSTS_PRELOAD.
Ed Morley
2016-08-10
1
-0
/
+16
*
Fixed #26601 -- Improved middleware per DEP 0005.
Florian Apolloner
2016-05-17
3
-21
/
+27
*
Fixed #24966 -- Added deployment system check for empty ALLOWED_HOSTS.
rroskam
2015-07-15
1
-0
/
+10
*
Sorted imports with isort; refs #23860.
Tim Graham
2015-02-06
3
-5
/
+3
*
Fixed #17101 -- Integrated django-secure and added check --deploy option
Tim Graham
2014-09-12
4
-0
/
+339