mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-10-23 21:59:11 +00:00
Code Issues 32 Releases Wiki Activity

Refs #26947 -- Added a deployment system check for SECURE_HSTS_PRELOAD.

Browse Source
This commit is contained in:
Ed Morley
2016-07-26 13:05:27 +01:00
committed by Tim Graham
parent 3c2447dd13
commit 7399fee6c3
4 changed files with 64 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
docs/ref/checks.txt
View File

@@ -596,6 +596,9 @@ The following checks are run if you use the :option:`check --deploy` option:
for your site to serve other parts of itself in a frame, you should change
it to ``'DENY'``.
* **security.W020**: :setting:`ALLOWED_HOSTS` must not be empty in deployment.
* **security.W021**: You have not set the
:setting:`SECURE_HSTS_PRELOAD` setting to ``True``. Without this, your site
cannot be submitted to the browser preload list.
Sites
-----