[error-report-web,0/2] Fix deployment security checks

Message ID	20261018015615.74684-1-tim.orling@konsulko.com
Headers	show Return-Path: <ticotimo@gmail.com> ip: 209.85.214.173, mailfrom: ticotimo@gmail.com) From: Tim Orling <ticotimo@gmail.com> To: yocto-patches@lists.yoctoproject.org Cc: Tim Orling <tim.orling@konsulko.com> Subject: [error-report-web][PATCH 0/2] Fix deployment security checks Date: Sat, 17 Oct 2026 18:54:36 -0700 Message-ID: <20261018015615.74684-1-tim.orling@konsulko.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	Fix deployment security checks \| expand [error-report-web,0/2] Fix deployment security checks [error-report-web,1/2] Enable SecurityMiddleware and XFrameOptionsMiddleware. [error-report-web,2/2] Read security settings from the environment and expect a proxy.

Message ID

20261018015615.74684-1-tim.orling@konsulko.com

Headers

From: Tim Orling <ticotimo@gmail.com>
To: yocto-patches@lists.yoctoproject.org
Cc: Tim Orling <tim.orling@konsulko.com>
Subject: [error-report-web][PATCH 0/2] Fix deployment security checks
Date: Sat, 17 Oct 2026 18:54:36 -0700
Message-ID: <20261018015615.74684-1-tim.orling@konsulko.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

Fix deployment security checks | expand

Message

Tim Orling Oct. 18, 2026, 1:54 a.m. UTC

The SecurityMiddleware was commented out/optional. We really should
be enabling it all the time.

Security settings should come from the environment and we should
always be using a proxy like nginx in production.

Tim Orling (2):
  Enable SecurityMiddleware and XFrameOptionsMiddleware.
  Read security settings from the environment and expect a proxy.

 Post/test.py               | 11 +++++++++++
 README                     |  5 ++++-
 docker/run-tests.sh        |  7 ++++---
 project/settings.py        | 27 +++++++++++++++++++++------
 project/settings.py.docker | 27 +++++++++++++++++++++------
 5 files changed, 61 insertions(+), 16 deletions(-)


base-commit: 752b7188d04c2fd0e2f32f0cd2dd437c43058d82
prerequisite-patch-id: 9c9d012e1163dd1d335531d0451657823f17eb64
prerequisite-patch-id: ddb4df3e54736ed25846f91d4918299e601f4071
prerequisite-patch-id: ab69f4aa494291611cbe0e916f18b07f4aeebe57
prerequisite-patch-id: ac2b802ea065536df3854c48e265f5508d201cff
prerequisite-patch-id: 81a7de0e9568848efc8c66d397abb5f56218db95
prerequisite-patch-id: cf32dcaef20903890a020211a35f46b2384207da
prerequisite-patch-id: 6920bc5c70071bbd42b55b08bfc2bff04133c3ab
prerequisite-patch-id: a72bee4356db80ccb45321967d18081961f60860
prerequisite-patch-id: a2285b682329ba20d838085588b7c6681a86d273
prerequisite-patch-id: c3980e46d49b00b419cf4a7c2bc32c346478a453
prerequisite-patch-id: 627f58daa68852066f56558f08b07ad4af7bef9f