← Back
Editing: sessions.cpython-311.pyc
� �|�e� � � � d dl mZ ddlmZmZmZ d� Z e ed� � d�� � Z e ed� � d �� � Z e ed � � d�� � Z d� Z e e d � � d�� � Z e e d� � d�� � Z e e d� � d�� � Z eej d�� � d� � � Z eej d�� � d� � � Zd� Zd� ZdS )� )�settings� )�Tags�Warning�registerc � � | dz S )Nzq Using a secure-only session cookie makes it more difficult for network traffic sniffers to hijack user sessions.� ��messages �F/usr/lib/python3/dist-packages/django/core/checks/security/sessions.py�add_session_cookie_messager s � �� <�� � znYou have 'django.contrib.sessions' in your INSTALLED_APPS, but you have not set SESSION_COOKIE_SECURE to True.z security.W010)�idz�You have 'django.contrib.sessions.middleware.SessionMiddleware' in your MIDDLEWARE, but you have not set SESSION_COOKIE_SECURE to True.z security.W011z)SESSION_COOKIE_SECURE is not set to True.z security.W012c � � | dz S )Nzs Using an HttpOnly session cookie makes it more difficult for cross-site scripting attacks to hijack user sessions.r r s r �add_httponly_messager $ s � �� @�� r zpYou have 'django.contrib.sessions' in your INSTALLED_APPS, but you have not set SESSION_COOKIE_HTTPONLY to True.z security.W013z�You have 'django.contrib.sessions.middleware.SessionMiddleware' in your MIDDLEWARE, but you have not set SESSION_COOKIE_HTTPONLY to True.z security.W014z+SESSION_COOKIE_HTTPONLY is not set to True.z security.W015T)�deployc � � g }t j skt � � r|� t � � t � � r|� t � � t |� � dk rt g}|S �N� ) r �SESSION_COOKIE_SECURE�_session_app�append�W010�_session_middleware�W011�len�W012��app_configs�kwargs�errorss r �check_session_cookie_securer"