diff --git a/.circleci/config.yml b/.circleci/config.yml deleted file mode 100644 index 742d420..0000000 --- a/.circleci/config.yml +++ /dev/null @@ -1,23 +0,0 @@ -version: 2.0 -jobs: - build: - docker: - - image: circleci/python:3.9 - steps: - - checkout - - restore_cache: - key: deps1-{{ .Branch }}-{{ checksum "requirements.txt" }} - - run: - command: | - python3 -m venv venv - . venv/bin/activate - pip install -r requirements.txt - - save_cache: - key: deps1-{{ .Branch }}-{{ checksum "requirements.txt" }} - paths: - - "venv" - - run: - name: Running tests - command: | - . venv/bin/activate - python3 manage.py test diff --git a/Project/settings.py b/Project/settings.py index 5db8180..23f616d 100644 --- a/Project/settings.py +++ b/Project/settings.py @@ -241,6 +241,16 @@ LOGOUT_URL = 'customer_sign_out' LOGOUT_REDIRECT_URL = 'customer_sign_in' +# Security Principles +SECURE_SSL_REDIRECT = True +SESSION_COOKIE_SECURE = True +SESSION_COOKIE_SECURE = True +SECURE_BROWSER_XSS_FILTER = True +SECURE_HSTS_SECONDS = 31536000 +SECURE_HSTS_INCLUDE_SUBDOMAINS = True +SECURE_HSTS_PRELOAD = True +SECURE_CONTENT_TYPE_NOSNIFF = True +CSRF_COOKIE_SECURE = True # Activate Django-Heroku. if 'HEROKU' in os.environ: diff --git a/Project/urls.py b/Project/urls.py index 8d934b1..34da5f3 100644 --- a/Project/urls.py +++ b/Project/urls.py @@ -4,7 +4,7 @@ from django.urls import include, path urlpatterns = [ - path('admin/', admin.site.urls), + path('secret/', admin.site.urls), path('', include('core.urls')), path('blog/', include('blog.urls')), path('vendor/', include('vendor.urls')),