a
    Lcòfú	  ã                   @   sÐ   d dl mZ ddlmZmZmZ dd„ Zeedƒdd�Zeed	ƒd
d�Zeedƒdd�Z	dd„ Z
ee
dƒdd�Zee
dƒdd�Zee
dƒdd�Zeejdd�dd„ ƒZeejdd�dd„ ƒZdd„ Zdd„ ZdS ) é    )Úsettingsé   )ÚTagsÚWarningÚregisterc                 C   s   | d S )Nzq Using a secure-only session cookie makes it more difficult for network traffic sniffers to hijack user sessions.© ©Úmessager   r   úa/home/httpd/docs/test/DocsMgr/lib/python3.9/site-packages/django/core/checks/security/sessions.pyÚadd_session_cookie_message   s    ÿr   znYou have 'django.contrib.sessions' in your INSTALLED_APPS, but you have not set SESSION_COOKIE_SECURE to True.zsecurity.W010)Úidz‡You have 'django.contrib.sessions.middleware.SessionMiddleware' in your MIDDLEWARE, but you have not set SESSION_COOKIE_SECURE to True.zsecurity.W011z)SESSION_COOKIE_SECURE is not set to True.zsecurity.W012c                 C   s   | d S )Nzs Using an HttpOnly session cookie makes it more difficult for cross-site scripting attacks to hijack user sessions.r   r   r   r   r
   Úadd_httponly_message$   s    ÿr   zpYou have 'django.contrib.sessions' in your INSTALLED_APPS, but you have not set SESSION_COOKIE_HTTPONLY to True.zsecurity.W013z‰You have 'django.contrib.sessions.middleware.SessionMiddleware' in your MIDDLEWARE, but you have not set SESSION_COOKIE_HTTPONLY to True.zsecurity.W014z+SESSION_COOKIE_HTTPONLY is not set to True.zsecurity.W015T)Zdeployc                 K   sH   t jdu rg S g }tƒ r"| t¡ tƒ r2| t¡ t|ƒdkrDtg}|S ©NTé   )	r   ZSESSION_COOKIE_SECUREÚ_session_appÚappendÚW010Ú_session_middlewareÚW011ÚlenÚW012©Zapp_configsÚkwargsÚerrorsr   r   r
   Úcheck_session_cookie_secureB   s    


r   c                 K   sH   t jdu rg S g }tƒ r"| t¡ tƒ r2| t¡ t|ƒdkrDtg}|S r   )	r   ZSESSION_COOKIE_HTTPONLYr   r   ÚW013r   ÚW014r   ÚW015r   r   r   r
   Úcheck_session_cookie_httponlyP   s    


r   c                   C   s
   dt jv S )Nz4django.contrib.sessions.middleware.SessionMiddleware)r   Z
MIDDLEWAREr   r   r   r
   r   ^   s    r   c                   C   s
   dt jv S )Nzdjango.contrib.sessions)r   ZINSTALLED_APPSr   r   r   r
   r   b   s    r   N)Zdjango.confr   Ú r   r   r   r   r   r   r   r   r   r   r   Úsecurityr   r   r   r   r   r   r   r
   Ú<module>   sR   ÿûÿú	þÿûÿú	þ

