diff --git a/.gitignore b/.gitignore index a039cec..2a2eb1b 100644 --- a/.gitignore +++ b/.gitignore @@ -3,3 +3,4 @@ __pycache__ virtenv /media +/static_root diff --git a/gulaschromstore/settings.py b/gulaschromstore/settings.py index 027e87e..a09fc3a 100644 --- a/gulaschromstore/settings.py +++ b/gulaschromstore/settings.py @@ -130,6 +130,9 @@ STATICFILES_DIRS = [ os.path.join(BASE_DIR, "static"), ] +STATIC_ROOT = os.path.join(BASE_DIR, 'static_root') + + MEDIA_URL = '/media/' MEDIA_ROOT = os.path.join(BASE_DIR, 'media') @@ -140,3 +143,11 @@ AUTH_USER_MODEL = 'users.User' LOGIN_REDIRECT_URL = '/' TAGGIT_CASE_INSENSITIVE = True + +# Some security settings +SESSION_COOKIE_SECURE = True +CSRF_COOKIE_SECURE = True +CSRF_COOKIE_HTTPONLY = True +X_FRAME_OPTIONS = 'DENY' +SECURE_CONTENT_TYPE_NOSNIFF = True +SECURE_BROWSER_XSS_FILTER = True