External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-01-15 03:40:42 -03:30
Code Issues Packages Projects Releases Wiki Activity

Set CSRF_COOKIE_AGE to 'None'.

Browse Source 
This causes them to be sent as session cookies, not 1-year cookies.
This commit is contained in:
Bill Nottingham 2017-01-12 16:25:56 -05:00
parent b1f3cd48c1
commit ef27d771fb
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
awx/settings/defaults.py
View File

@ -169,6 +169,10 @@ SESSION_COOKIE_SECURE = True
# Disallow sending csrf cookies over insecure connections
CSRF_COOKIE_SECURE = True
# Limit CSRF cookies to browser sessions
CSRF_COOKIE_AGE = None
TEMPLATE_CONTEXT_PROCESSORS = ( # NOQA
'django.contrib.auth.context_processors.auth',
'django.core.context_processors.debug',