Skip to content

Conversation

@pixeebot
Copy link

@pixeebot pixeebot bot commented May 22, 2024

I've reviewed the recently opened PR (9 - initial tweet model) and have identified some area(s) that could benefit from additional hardening measures.

These changes should help prevent potential security vulnerabilities and improve overall code quality.

Thank you for your consideration!

docs | feedback
🧚🤖 Powered by Pixeebot

💬Feedback | 👥Community | 📚Docs

@pixeebot pixeebot bot requested a review from taoerman May 22, 2024 21:20

# SECURITY WARNING: don't run with debug turned on in production!
DEBUG = True
DEBUG = False
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Flip Django debug flag to off.

# https://docs.djangoproject.com/en/3.1/howto/static-files/

STATIC_URL = '/static/'
SESSION_COOKIE_SECURE = True
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sets Django's SESSION_COOKIE_SECURE flag if off or missing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant