This repository has been archived by the owner on Nov 7, 2024. It is now read-only.

Security issues. #1

Open

juice500ml opened this issue Jan 6, 2019 · 0 comments

Member

juice500ml commented Jan 6, 2019

reluv.me is dead.

https://github.com/SGCSRelease/rsop-front/blob/master/settings.py#L23
SECRET_KEY must not be opened in public.

https://github.com/SGCSRelease/rsop-front/blob/master/settings.py#L26
DEBUG=True must not be used in public versions.

https://github.com/SGCSRelease/rsop-front/network/alert/requirements.txt/django/open
Known security isseus for django<2.0.8
(CVE-2018-7537, CVE-2018-7536, CVE-2018-14574, CVE-2018-6188)

No https settings?

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.