Anders Kaseorg b1e7d8b51d settings: Harden session and CSRF cookies with __Host- prefix. ... This defends against cross-origin session fixation attacks. Renaming the cookies means this one-time upgrade will have the unfortunate side effect of logging everyone out, but they’ll get more secure sessions in return. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>		2020-04-12 11:55:55 -07:00
..
jinja2	static: Serve webpack bundles from the root domain.	2020-04-10 00:48:02 -07:00
__init__.py	…
backends.py	python: Modernize legacy Python 2 syntax with pyupgrade.	2020-04-09 16:43:22 -07:00
config.py	python: Modernize legacy Python 2 syntax with pyupgrade.	2020-04-09 16:43:22 -07:00
default_settings.py	auth: Set `development_only=True` for `SOCIAL_AUTH_GITLAB_KEY`.	2020-03-23 16:03:12 -07:00
dev_settings.py	auth: Add support for GitLab authentication.	2020-02-11 13:54:17 -08:00
dev_urls.py	static: Serve webpack bundles from the root domain.	2020-04-10 00:48:02 -07:00
email_backends.py	python: Modernize legacy Python 2 syntax with pyupgrade.	2020-04-09 16:43:22 -07:00
legacy_urls.py	urls: Move the json/fetch_api_key endpoint to be an API-style route.	2018-01-08 13:15:52 -05:00
prod_settings_template.py	docs: Updated links to python-social-auth docs.	2020-03-20 08:54:37 -04:00
settings.py	settings: Harden session and CSRF cookies with __Host- prefix.	2020-04-12 11:55:55 -07:00
slack_importer_test_settings.py	settings: Migrate test settings to modern postgres backend name.	2019-01-23 17:08:24 -08:00
terms.md.template	Add TERMS_OF_SERVICE setting.	2016-07-29 20:47:31 -07:00
test_settings.py	static: Serve webpack bundles from the root domain.	2020-04-10 00:48:02 -07:00
urls.py	text: Fix some typos (most of them found and fixed by codespell).	2020-03-27 17:25:56 -07:00
wsgi.py	setup_path_on_import: Replace with setup_path function.	2020-02-25 15:40:21 -08:00