Be less paranoid when DEBUG is enabled

2017-05-20 14:34:16 +02:00 · 2017-05-20 14:34:16 +02:00 · 7736df17ea
parent b7ace57996
commit 7736df17ea
1 changed files with 8 additions and 7 deletions
--- a/gulaschromstore/settings.py
+++ b/gulaschromstore/settings.py
@ -144,7 +144,8 @@ LOGIN_REDIRECT_URL = '/'

 TAGGIT_CASE_INSENSITIVE = True

-# Some security settings
+# Some security settings only active in production
+if not DEBUG:
    SESSION_COOKIE_SECURE = True
    CSRF_COOKIE_SECURE = True
    CSRF_COOKIE_HTTPONLY = True