î
ªÍ XÝ
  ã               @   sB  d  d l  m Z d d l m Z m Z m Z d d l m Z d d „  Z e e d ƒ d d	 ƒZ	 e e d
 ƒ d d ƒZ
 e e d ƒ d d ƒZ d d „  Z e e d ƒ d d ƒZ e e d ƒ d d ƒZ e e d ƒ d d ƒZ e e j d d ƒd d „  ƒ Z e e j d d ƒd d „  ƒ Z d d „  Z d d „  Z d  S)!é    )Úsettingsé   )ÚTagsÚWarningÚregister)Úpatch_middleware_messagec             C   s   |  d S)Nzq Using a secure-only session cookie makes it more difficult for network traffic sniffers to hijack user sessions.© )Úmessager   r   úR/home/ubuntu/projects/ifolica/build/django/django/core/checks/security/sessions.pyÚadd_session_cookie_message   s    r   znYou have 'django.contrib.sessions' in your INSTALLED_APPS, but you have not set SESSION_COOKIE_SECURE to True.Úidzsecurity.W010z‡You have 'django.contrib.sessions.middleware.SessionMiddleware' in your MIDDLEWARE, but you have not set SESSION_COOKIE_SECURE to True.zsecurity.W011z)SESSION_COOKIE_SECURE is not set to True.zsecurity.W012c             C   s   |  d S)Nzs Using an HttpOnly session cookie makes it more difficult for cross-site scripting attacks to hijack user sessions.r   )r	   r   r   r
   Úadd_httponly_message$   s    r   zpYou have 'django.contrib.sessions' in your INSTALLED_APPS, but you have not set SESSION_COOKIE_HTTPONLY to True.zsecurity.W013z‰You have 'django.contrib.sessions.middleware.SessionMiddleware' in your MIDDLEWARE, but you have not set SESSION_COOKIE_HTTPONLY to True.zsecurity.W014z+SESSION_COOKIE_HTTPONLY is not set to True.zsecurity.W015ZdeployTc             K   sl   g  } t  j sh t ƒ  r( | j t ƒ n  t ƒ  rG | j t t ƒ ƒ n  t | ƒ d k rh t	 g } qh n  | S)Né   )
r   ZSESSION_COOKIE_SECUREÚ_session_appÚappendÚW010Ú_session_middlewarer   ÚW011ÚlenÚW012)Úapp_configsÚkwargsÚerrorsr   r   r
   Úcheck_session_cookie_secureB   s    			r   c             K   sl   g  } t  j sh t ƒ  r( | j t ƒ n  t ƒ  rG | j t t ƒ ƒ n  t | ƒ d k rh t	 g } qh n  | S)Nr   )
r   ZSESSION_COOKIE_HTTPONLYr   r   ÚW013r   r   ÚW014r   ÚW015)r   r   r   r   r   r
   Úcheck_session_cookie_httponlyO   s    			r   c               C   s%   d t  j k p$ t  j o$ d t  j k S)Nz4django.contrib.sessions.middleware.SessionMiddleware)r   ZMIDDLEWARE_CLASSESZ
MIDDLEWAREr   r   r   r
   r   \   s    r   c               C   s   d t  j k S)Nzdjango.contrib.sessions)r   ZINSTALLED_APPSr   r   r   r
   r   a   s    r   N)Zdjango.confr   Ú r   r   r   Úutilsr   r   r   r   r   r   r   r   r   Úsecurityr   r   r   r   r   r   r   r
   Ú<module>   s<   										!!