WebAppSec/Secure Coding Details
Jump to navigation
Jump to search
Author
Michael Coates - mcoates [at] mozilla.com
Introduction
This document provides code examples and links to support the secure coding guidelines document.
Status
Layout
Session Management
Secure Flag
Django
Django provides built in support for setting the SECURE flag for the session id cookie. By default Django does NOT set the flag to secure
Correct Setting:
SESSION_COOKIE_SECURE = TRUE
http://docs.djangoproject.com/en/dev/topics/http/sessions/#session-cookie-secure