
    Vh	                     d   d dl mZ ddlmZmZmZ d Z e ed      d      Z e ed      d	      Z e ed
      d      Z	d Z
 e e
d      d      Z e e
d      d      Z e e
d      d      Z eej                  d      d        Z eej                  d      d        Zd Zd Zy)    )settings   )TagsWarningregisterc                     | dz   S )Nzq Using a secure-only session cookie makes it more difficult for network traffic sniffers to hijack user sessions. messages    T/home/dcms/DCMS/lib/python3.12/site-packages/django/core/checks/security/sessions.pyadd_session_cookie_messager      s    	<     znYou have 'django.contrib.sessions' in your INSTALLED_APPS, but you have not set SESSION_COOKIE_SECURE to True.zsecurity.W010)idzYou have 'django.contrib.sessions.middleware.SessionMiddleware' in your MIDDLEWARE, but you have not set SESSION_COOKIE_SECURE to True.zsecurity.W011z)SESSION_COOKIE_SECURE is not set to True.zsecurity.W012c                     | dz   S )Nzs Using an HttpOnly session cookie makes it more difficult for cross-site scripting attacks to hijack user sessions.r	   r
   s    r   add_httponly_messager   $   s    	@ r   zpYou have 'django.contrib.sessions' in your INSTALLED_APPS, but you have not set SESSION_COOKIE_HTTPONLY to True.zsecurity.W013zYou have 'django.contrib.sessions.middleware.SessionMiddleware' in your MIDDLEWARE, but you have not set SESSION_COOKIE_HTTPONLY to True.zsecurity.W014z+SESSION_COOKIE_HTTPONLY is not set to True.zsecurity.W015T)deployc                     t         j                  du rg S g }t               r|j                  t               t               r|j                  t               t        |      dkD  rt        g}|S NT   )	r   SESSION_COOKIE_SECURE_session_appappendW010_session_middlewareW011lenW012app_configskwargserrorss      r   check_session_cookie_securer"   B   sT    %%-	F~dd
6{QMr   c                     t         j                  du rg S g }t               r|j                  t               t               r|j                  t               t        |      dkD  rt        g}|S r   )	r   SESSION_COOKIE_HTTPONLYr   r   W013r   W014r   W015r   s      r   check_session_cookie_httponlyr(   P   sT    ''4/	F~dd
6{QMr   c                  &    dt         j                  v S )Nz4django.contrib.sessions.middleware.SessionMiddleware)r   
MIDDLEWAREr	   r   r   r   r   ^   s    AXEXEXXXr   c                  &    dt         j                  v S )Nzdjango.contrib.sessions)r   INSTALLED_APPSr	   r   r   r   r   b   s    $(?(???r   N)django.confr    r   r   r   r   r   r   r   r   r%   r&   r'   securityr"   r(   r   r   r	   r   r   <module>r0      s     & & 	>  	)
  JK 	@  	+
  FG 
$--%
 &
 
$--%
 &
Y@r   