Skip to content

Hardening suggestions for Employment-Assessment / fix-react-index-html#40

Open
pixeebot[bot] wants to merge 2 commits intofix-react-index-htmlfrom
pixeebot/fix-react-index-html
Open

Hardening suggestions for Employment-Assessment / fix-react-index-html#40
pixeebot[bot] wants to merge 2 commits intofix-react-index-htmlfrom
pixeebot/fix-react-index-html

Conversation

@pixeebot
Copy link
Contributor

@pixeebot pixeebot bot commented Nov 9, 2024

I've reviewed the recently opened PR (39 - Fix HR_Interface to point to React index HTML) and have identified some area(s) that could benefit from additional hardening measures.

These changes should help prevent potential security vulnerabilities and improve overall code quality.

Thank you for your consideration!
🧚🤖 Powered by Pixeebot

Feedback | Community | Docs

@pixeebot pixeebot bot requested a review from nkzarrabi November 9, 2024 14:59

# Ensure STATIC_ROOT is set for collecting static files in production
STATIC_ROOT = BASE_DIR / 'staticfiles' # Where `collectstatic` will collect files for deployment
SESSION_COOKIE_SECURE = True
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sets Django's SESSION_COOKIE_SECURE flag if off or missing.


# SECURITY WARNING: don't run with debug turned on in production!
DEBUG = True
DEBUG = False
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Flip Django debug flag to off.

@nkzarrabi nkzarrabi added the wontfix This will not be worked on label Nov 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

wontfix This will not be worked on

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant