
vÅÏ^þ	  ã               @   s2  d  d l  m Z d d l m Z m Z m Z d d „  Z e e d ƒ d d ƒZ e e d	 ƒ d d
 ƒZ e e d ƒ d d ƒZ	 d d „  Z
 e e
 d ƒ d d ƒZ e e
 d ƒ d d ƒZ e e
 d ƒ d d ƒZ e e j d d ƒd d „  ƒ Z e e j d d ƒd d „  ƒ Z d d „  Z d d „  Z d S) é    )Úsettingsé   )ÚTagsÚWarningÚregisterc             C   s   |  d S)Nzq Using a secure-only session cookie makes it more difficult for network traffic sniffers to hijack user sessions.© )Úmessager   r   úF/tmp/pip-build-8lau8j11/django/django/core/checks/security/sessions.pyÚadd_session_cookie_message   s    r
   znYou have 'django.contrib.sessions' in your INSTALLED_APPS, but you have not set SESSION_COOKIE_SECURE to True.Úidzsecurity.W010z‡You have 'django.contrib.sessions.middleware.SessionMiddleware' in your MIDDLEWARE, but you have not set SESSION_COOKIE_SECURE to True.zsecurity.W011z)SESSION_COOKIE_SECURE is not set to True.zsecurity.W012c             C   s   |  d S)Nzs Using an HttpOnly session cookie makes it more difficult for cross-site scripting attacks to hijack user sessions.r   )r   r   r   r	   Úadd_httponly_message$   s    r   zpYou have 'django.contrib.sessions' in your INSTALLED_APPS, but you have not set SESSION_COOKIE_HTTPONLY to True.zsecurity.W013z‰You have 'django.contrib.sessions.middleware.SessionMiddleware' in your MIDDLEWARE, but you have not set SESSION_COOKIE_HTTPONLY to True.zsecurity.W014z+SESSION_COOKIE_HTTPONLY is not set to True.zsecurity.W015ZdeployTc             K   sZ   g  } t  j sV t ƒ  r% | j t ƒ t ƒ  r; | j t ƒ t | ƒ d k rV t g } | S)Né   )	r   ZSESSION_COOKIE_SECUREÚ_session_appÚappendÚW010Ú_session_middlewareÚW011ÚlenÚW012)Úapp_configsÚkwargsÚerrorsr   r   r	   Úcheck_session_cookie_secureB   s    				r   c             K   sZ   g  } t  j sV t ƒ  r% | j t ƒ t ƒ  r; | j t ƒ t | ƒ d k rV t g } | S)Nr   )	r   ZSESSION_COOKIE_HTTPONLYr   r   ÚW013r   ÚW014r   ÚW015)r   r   r   r   r   r	   Úcheck_session_cookie_httponlyO   s    				r   c               C   s   d t  j k S)Nz4django.contrib.sessions.middleware.SessionMiddleware)r   Z
MIDDLEWAREr   r   r   r	   r   \   s    r   c               C   s   d t  j k S)Nzdjango.contrib.sessions)r   ZINSTALLED_APPSr   r   r   r	   r   `   s    r   N)Zdjango.confr   Ú r   r   r   r
   r   r   r   r   r   r   r   Úsecurityr   r   r   r   r   r   r   r	   Ú<module>   s:   										!!