Be less paranoid when DEBUG is enabled

2017-05-20 14:34:16 +02:00 · 2017-05-20 14:34:16 +02:00 · 7736df17ea
parent b7ace57996
commit 7736df17ea
1 changed files with 8 additions and 7 deletions
--- a/gulaschromstore/settings.py
+++ b/gulaschromstore/settings.py
@ -144,10 +144,11 @@ LOGIN_REDIRECT_URL = '/'

 TAGGIT_CASE_INSENSITIVE = True

-# Some security settings
-SESSION_COOKIE_SECURE = True
-CSRF_COOKIE_SECURE = True
-CSRF_COOKIE_HTTPONLY = True
-X_FRAME_OPTIONS = 'DENY'
-SECURE_CONTENT_TYPE_NOSNIFF = True
-SECURE_BROWSER_XSS_FILTER = True
+# Some security settings only active in production
+if not DEBUG:
+    SESSION_COOKIE_SECURE = True
+    CSRF_COOKIE_SECURE = True
+    CSRF_COOKIE_HTTPONLY = True
+    X_FRAME_OPTIONS = 'DENY'
+    SECURE_CONTENT_TYPE_NOSNIFF = True
+    SECURE_BROWSER_XSS_FILTER = True