Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

hotfix: set SESSION_COOKIE_SECURE = True #695

Merged
merged 1 commit into from
Aug 22, 2023
Merged

Conversation

rstijerina
Copy link
Member

@rstijerina rstijerina commented Aug 22, 2023

Overview

Sets SESSION_COOKIE_SECURE = True to resolve a flag set by an ISO security audit.

Related

Testing

  1. In the chrome devtools, go to Application -> Cookies -> and ensure that the "Secure" column for the "sessionid" cookie is checked. See screenshot below

UI

Screenshot 2023-08-22 at 9 37 19 AM

Copy link
Collaborator

@taoteg taoteg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

Copy link
Member

@wesleyboar wesleyboar left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I am unavailable to test yet. I approve it because I don't anticipate an issue. And Django says it should be True (even though default it to False).

https://docs.djangoproject.com/en/3.2/ref/settings/#std-setting-SESSION_COOKIE_SECURE

@wesleyboar
Copy link
Member

wesleyboar commented Aug 22, 2023

If every CMS needs this, then this should also be done off on a branch off of v3.11.5 tag, so I can make a v3.11.6 release. Most sites are running v3.11. Core-CMS does not have a stable v3.12 yet.

@wesleyboar wesleyboar merged commit 3fa9edf into main Aug 22, 2023
@wesleyboar wesleyboar deleted the fix/session-cookie-secure branch August 22, 2023 15:56
wesleyboar added a commit to TACC/tup-ui that referenced this pull request Aug 23, 2023
wesleyboar added a commit to TACC/Core-CMS-Custom that referenced this pull request Aug 23, 2023
rstijerina pushed a commit to TACC/Core-CMS-Custom that referenced this pull request Aug 23, 2023
wesleyboar added a commit to TACC/tup-ui that referenced this pull request Aug 23, 2023
jarosenb pushed a commit to TACC/tup-ui that referenced this pull request Aug 23, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants