
    Vh                         d dl Z d dlmZ ddlmZmZmZmZ  edd      Z edd	      Z	d
 Z
 eej                  d      d        Z eej                  d      d        Z eej                        d        Zy)    N)settings   )ErrorTagsWarningregistera  You don't appear to be using Django's built-in cross-site request forgery protection via the middleware ('django.middleware.csrf.CsrfViewMiddleware' is not in your MIDDLEWARE). Enabling the middleware is the safest approach to ensure you don't leave any holes.zsecurity.W003idzYou have 'django.middleware.csrf.CsrfViewMiddleware' in your MIDDLEWARE, but you have not set CSRF_COOKIE_SECURE to True. Using a secure-only CSRF cookie makes it more difficult for network traffic sniffers to steal the CSRF token.zsecurity.W016c                  &    dt         j                  v S )Nz)django.middleware.csrf.CsrfViewMiddleware)r   
MIDDLEWARE     P/home/dcms/DCMS/lib/python3.12/site-packages/django/core/checks/security/csrf.py_csrf_middlewarer      s    6(:M:MMMr   T)deployc                 ,    t               }|rg S t        gS )N)r   W003app_configskwargspassed_checks      r   check_csrf_middlewarer      s    #%L2)D6)r   c                 z    t         j                  xs t                xs t         j                  du }|rg S t        gS )NT)r   CSRF_USE_SESSIONSr   CSRF_COOKIE_SECUREW016r   s      r   check_csrf_cookie_securer   #   sD     	"" 	/!!	/&&$. 
 2)D6)r   c                 p   ddl m} g }	  |       }	 t        j                  |      j	                  d d        |S # t
        $ r3 dt        j                  z  }|j                  t        |d             Y |S w xY w# t        $ r3 dt        j                  z  }|j                  t        |d             Y |S w xY w)	Nr   )_get_failure_view)reasonzIThe CSRF failure view '%s' does not take the correct number of arguments.zsecurity.E101r	   z1The CSRF failure view '%s' could not be imported.zsecurity.E102)django.middleware.csrfr   inspect	signaturebind	TypeErrorr   CSRF_FAILURE_VIEWappendr   ImportError)r   r   r   errorsviewmsgs         r   check_csrf_failure_viewr,   -   s    8F: "	:d#((d(; M  	:'99:  MM%89M	:  6?(() 	 	eCO45 M6s    A9 &: 8A65A698B54B5)r"   django.confr    r   r   r   r   r   r   r   securityr   r   r,   r   r   r   <module>r0      s       - -+
  0 N 
$--%* &*
 
$--%* &* 
$-- r   