carljm/django-secure

Issues

• Middleware throws TypeError under Django 1.10.4 and Python 3.5.2

  #36 opened 8 years ago by darkpixel
  1

• django-secure should discourage cookie backed session stores

  #2 opened 9 years ago by PaulMcMillan
  8

• warn if Django's new USE_X_FORWARDED_HOST setting is set to True

  #10 opened 9 years ago by carljm
  2

• Document some typical possible values for SECURE_PROXY_SSL_HEADER

  #11 opened 9 years ago by carljm
  3

• Crazy idea: experimentally verify that SECURE_SSL_PROXY_HEADER is set correctly

  #12 opened 9 years ago by carljm
  1

• Check for CSRF_COOKIE_SECURE

  #19 opened 9 years ago by carljm
  5

• Possible features: Check database security?

  #31 opened 9 years ago by puterleat
  2

• Document status versus 1.8

  #34 opened 9 years ago by dokterbob
  2

• SSL redirect optionally for GET requests only

  #33 opened 10 years ago by johannesschirrmeister
  1

• Move tests to a sub-package so manage.py test doesn't discover them in pre-1.6 Django

  #30 opened 10 years ago by carljm
  1

• the check_frame_deny check should pass if Django's new X_FRAME_OPTIONS setting is set to DENY and the XFrameOptions middleware is installed

  #16 opened 11 years ago by carljm
  1

• Detect versions of Django that support SECURE_PROXY_SSL_HEADER setting and skip the request.is_secure monkeypatch

  #17 opened 11 years ago by carljm
  1

• Add TravisCI/drone.io and coveralls.io support

  #22 opened 11 years ago by carljm
  1

• Support Python 3

  #23 opened 11 years ago by carljm
  1

• Add optional support for Heartbleed headers

  #26 opened 11 years ago by ebpmp
  5

• 400 error

  #27 opened 11 years ago by kmollee
  2

• TypeError: 'unicode' object does not support item assignment

  #24 opened 11 years ago by tijs
  5

• Enforce SECRET_KEY

  #20 opened 12 years ago by cool-RR
  6

• Reminder to Make a Release with Subdomains HSTS

  #18 opened 13 years ago by dstufft
  1

• HSTS needs subdomains option

  #13 opened 13 years ago by PaulMcMillan
  2

• consider warning on .extra() and .raw()

  #1 opened 14 years ago by PaulMcMillan
  2