B
    ©0H[þ	  ã               @   sÐ   d dl mZ ddlmZmZmZ dd„ Zeedƒdd�Zeed	ƒd
d�Zeedƒdd�Z	dd„ Z
ee
dƒdd�Zee
dƒdd�Zee
dƒdd�Zeejdd�dd„ ƒZeejdd�dd„ ƒZdd„ Zdd„ ZdS ) é    )Úsettingsé   )ÚTagsÚWarningÚregisterc             C   s   | d S )Nzq Using a secure-only session cookie makes it more difficult for network traffic sniffers to hijack user sessions.© )Úmessager   r   úhC:\Users\HIRONO~1\AppData\Local\Temp\pip-install-6bm3nxem\django\django\core\checks\security\sessions.pyÚadd_session_cookie_message   s    r
   znYou have 'django.contrib.sessions' in your INSTALLED_APPS, but you have not set SESSION_COOKIE_SECURE to True.zsecurity.W010)Úidz‡You have 'django.contrib.sessions.middleware.SessionMiddleware' in your MIDDLEWARE, but you have not set SESSION_COOKIE_SECURE to True.zsecurity.W011z)SESSION_COOKIE_SECURE is not set to True.zsecurity.W012c             C   s   | d S )Nzs Using an HttpOnly session cookie makes it more difficult for cross-site scripting attacks to hijack user sessions.r   )r   r   r   r	   Úadd_httponly_message$   s    r   zpYou have 'django.contrib.sessions' in your INSTALLED_APPS, but you have not set SESSION_COOKIE_HTTPONLY to True.zsecurity.W013z‰You have 'django.contrib.sessions.middleware.SessionMiddleware' in your MIDDLEWARE, but you have not set SESSION_COOKIE_HTTPONLY to True.zsecurity.W014z+SESSION_COOKIE_HTTPONLY is not set to True.zsecurity.W015T)Zdeployc             K   s@   g }t js<tƒ r| t¡ tƒ r*| t¡ t|ƒdkr<tg}|S )Né   )	r   ZSESSION_COOKIE_SECUREÚ_session_appÚappendÚW010Ú_session_middlewareÚW011ÚlenÚW012)Úapp_configsÚkwargsÚerrorsr   r   r	   Úcheck_session_cookie_secureB   s    

r   c             K   s@   g }t js<tƒ r| t¡ tƒ r*| t¡ t|ƒdkr<tg}|S )Nr   )	r   ZSESSION_COOKIE_HTTPONLYr   r   ÚW013r   ÚW014r   ÚW015)r   r   r   r   r   r	   Úcheck_session_cookie_httponlyO   s    

r   c               C   s
   dt jkS )Nz4django.contrib.sessions.middleware.SessionMiddleware)r   Z
MIDDLEWAREr   r   r   r	   r   \   s    r   c               C   s
   dt jkS )Nzdjango.contrib.sessions)r   ZINSTALLED_APPSr   r   r   r	   r   `   s    r   N)Zdjango.confr   Ú r   r   r   r
   r   r   r   r   r   r   r   Úsecurityr   r   r   r   r   r   r   r	   Ú<module>   s:   