403Webshell
Server IP : 217.160.0.135  /  Your IP : 216.73.217.85
Web Server : Apache
System : Linux www 6.18.52-i1-ampere #1203 SMP Mon Sep 14 18:29:59 CEST 2026 aarch64
User : sws1074145052 ( 1074145052)
PHP Version : 8.3.32
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /lib/python3/dist-packages/django/core/checks/security/__pycache__/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /lib/python3/dist-packages/django/core/checks/security/__pycache__/base.cpython-311.pyc
�

�|�e��
���ddlmZddlmZddlmZmZmZmZhd�Z	dZ
dZdZed	d
���Z
edd
���Zedd���Zedd���Zedd���Zedd���Zedeee
d�zd���Zedd���Zedd���Zedd���Zedd ���Zed!d"���Zed#d$�d%�ee	������d&�'��Zed(d)���Zd*�Zd+�Zeej d,�-��d.���Z!eej d,�-��d/���Z"eej d,�-��d0���Z#eej d,�-��d1���Z$eej d,�-��d2���Z%eej d,�-��d3���Z&eej d,�-��d4���Z'eej d,�-��d5���Z(eej d,�-��d6���Z)eej d,�-��d7���Z*eej d,�-��d8���Z+eej d,�-��d9���Z,eej ��d:���Z-d;S)<�)�settings)�ImproperlyConfigured�)�Error�Tags�Warning�register>�
unsafe-url�no-referrer�same-origin�
strict-origin�origin-when-cross-origin�no-referrer-when-downgrade�strict-origin-when-cross-origin�originzdjango-insecure-�2�z�You do not have 'django.middleware.security.SecurityMiddleware' in your MIDDLEWARE so the SECURE_HSTS_SECONDS, SECURE_CONTENT_TYPE_NOSNIFF, SECURE_BROWSER_XSS_FILTER, SECURE_REFERRER_POLICY, and SECURE_SSL_REDIRECT settings will have no effect.z
security.W001)�ida3You do not have 'django.middleware.clickjacking.XFrameOptionsMiddleware' in your MIDDLEWARE, so your pages will not be served with an 'x-frame-options' header. Unless there is a good reason for your site to be served in a frame, you should consider enabling this header to help prevent clickjacking attacks.z
security.W002a,You have not set a value for the SECURE_HSTS_SECONDS setting. If your entire site is served only over SSL, you may want to consider setting a value and enabling HTTP Strict Transport Security. Be sure to read the documentation first; enabling HSTS carelessly can cause serious, irreversible problems.z
security.W004aYou have not set the SECURE_HSTS_INCLUDE_SUBDOMAINS setting to True. Without this, your site is potentially vulnerable to attack via an insecure connection to a subdomain. Only set this to True if you are certain that all subdomains of your domain should be served exclusively via SSL.z
security.W005z�Your SECURE_CONTENT_TYPE_NOSNIFF setting is not set to True, so your pages will not be served with an 'X-Content-Type-Options: nosniff' header. You should consider enabling this header to prevent the browser from identifying content types incorrectly.z
security.W006aYour SECURE_SSL_REDIRECT setting is not set to True. Unless your site should be available over both SSL and non-SSL connections, you may want to either set this setting True or configure a load balancer or reverse-proxy server to redirect all connections to HTTPS.z
security.W008aRYour SECRET_KEY has less than %(min_length)s characters, less than %(min_unique_chars)s unique characters, or it's prefixed with '%(insecure_prefix)s' indicating that it was generated automatically by Django. Please generate a long and random SECRET_KEY, otherwise many of Django's security-critical features will be vulnerable to attack.)�
min_length�min_unique_chars�insecure_prefixz
security.W009z4You should not have DEBUG set to True in deployment.z
security.W018z�You have 'django.middleware.clickjacking.XFrameOptionsMiddleware' in your MIDDLEWARE, but X_FRAME_OPTIONS is not set to 'DENY'. Unless there is a good reason for your site to serve other parts of itself in a frame, you should change it to 'DENY'.z
security.W019z.ALLOWED_HOSTS must not be empty in deployment.z
security.W020z�You have not set the SECURE_HSTS_PRELOAD setting to True. Without this, your site cannot be submitted to the browser preload list.z
security.W021z�You have not set the SECURE_REFERRER_POLICY setting. Without this, your site will not send a Referrer-Policy header. You should consider enabling this header to protect user privacy.z
security.W022zDYou have set the SECURE_REFERRER_POLICY setting to an invalid value.zValid values are: {}.z, z
security.E023)�hintrz5DEFAULT_HASHING_ALGORITHM must be 'sha1' or 'sha256'.z
security.E100c��dtjvS)Nz-django.middleware.security.SecurityMiddleware�r�
MIDDLEWARE���B/usr/lib/python3/dist-packages/django/core/checks/security/base.py�_security_middlewarer�s��:�h�>Q�Q�Qrc��dtjvS)Nz6django.middleware.clickjacking.XFrameOptionsMiddlewarerrrr�_xframe_middlewarer!�s��C�x�GZ�Z�ZrT)�deployc�6�t��}|rgntgS�N)r�W001��app_configs�kwargs�passed_checks   r�check_security_middlewarer*�s��'�)�)�L��)�2�2�D�6�)rc�6�t��}|rgntgSr$)r!�W002r&s   r�check_xframe_options_middlewarer-�s��%�'�'�L��)�2�2�D�6�)rc�P�t��ptj}|rgntgSr$)rr�SECURE_HSTS_SECONDS�W004r&s   r�	check_stsr1�s)��+�-�-�-�M��1M�L��)�2�2�D�6�)rc�n�t��ptjp
tjdu}|rgntgS�NT)rrr/�SECURE_HSTS_INCLUDE_SUBDOMAINS�W005r&s   r�check_sts_include_subdomainsr6�sF��
!�"�"�"�	8��(�(�	8��/�4�7��
�)�2�2�D�6�)rc�n�t��ptjp
tjdu}|rgntgSr3)rrr/�SECURE_HSTS_PRELOAD�W021r&s   r�check_sts_preloadr:�sF��
!�"�"�"�	-��(�(�	-��$��,��
�)�2�2�D�6�)rc�T�t��p
tjdu}|rgntgSr3)rr�SECURE_CONTENT_TYPE_NOSNIFF�W006r&s   r�check_content_type_nosniffr>�s8��
!�"�"�"�	5��,��4���)�2�2�D�6�)rc�T�t��p
tjdu}|rgntgSr3)rr�SECURE_SSL_REDIRECT�W008r&s   r�check_ssl_redirectrB�s8��
!�"�"�"�	-��$��,���)�2�2�D�6�)rc��	tj}tt|����tko2t|��t
ko|�t��}n#ttf$rd}YnwxYw|rgntgS)NF)r�
SECRET_KEY�len�set� SECRET_KEY_MIN_UNIQUE_CHARACTERS�SECRET_KEY_MIN_LENGTH�
startswith�SECRET_KEY_INSECURE_PREFIXr�AttributeError�W009)r'r(�
secret_keyr)s    r�check_secret_keyrN�s���	
��(�
�

��J��� � �$D�D�
B��
�O�O�4�4�
B��%�%�&@�A�A�A�	���
!�.�1�������������)�2�2�D�6�)s�A'�'A=�<A=c�4�tj}|rgntgSr$)r�DEBUG�W018r&s   r�check_debugrR�s���~�%�L��)�2�2�D�6�)rc�X�t��ptjdk}|rgntgS)N�DENY)r!r�X_FRAME_OPTIONS�W019r&s   r�check_xframe_denyrW�s8��
� � � �	+�� �F�*���)�2�2�D�6�)rc�.�tjrgntgSr$)r�
ALLOWED_HOSTS�W020�r'r(s  r�check_allowed_hostsr\�s���'�3�2�2�d�V�3rc�4�t��r�tj�tgSt	tjt
��r*d�tj�d��D��}nttj��}|tkstgSgS)Nc�6�h|]}|�����Sr)�strip)�.0�vs  r�	<setcomp>z(check_referrer_policy.<locals>.<setcomp>�s ��T�T�T�A�a�g�g�i�i�T�T�Tr�,)
rr�SECURE_REFERRER_POLICY�W022�
isinstance�str�splitrF�REFERRER_POLICY_VALUES�E023)r'r(�valuess   r�check_referrer_policyrl�s������	��*�2��6�M��h�5�s�;�;�	:�T�T��)H�)N�)N�s�)S�)S�T�T�T�F�F���8�9�9�F��/�/�/��6�M�
�Irc�2�tjdvrtgSgS)N>�sha1�sha256)r�DEFAULT_HASHING_ALGORITHM�E100r[s  r�check_default_hashing_algorithmrr�s���)�1C�C�C��v�
�
�IrN).�django.confr�django.core.exceptionsr�rrrr	rirJrHrGr%r,r0r5r=rArLrQrVrZr9re�format�join�sortedrjrqrr!�securityr*r-r1r6r:r>rBrNrRrWr\rlrrrrr�<module>rzs��� � � � � � �7�7�7�7�7�7�-�-�-�-�-�-�-�-�-�-�-�-�����0����#$� ��w��
�
�����w�3�������w�0�
�
�����w��
�
�����w�:�
�
�����w�,�
�
�����w�H�
,�<�5�K�K�	�������w�:������
�w�9�
�
�����w�4������
�w�A�������w�4��	����
�u�J�	 �	'�	'��	�	�&�&�9O�2P�2P�(Q�(Q�	R�	R������
�u�;������R�R�R�[�[�[�
��$�-��%�%�%�*�*�&�%�*�

��$�-��%�%�%�*�*�&�%�*�

��$�-��%�%�%�*�*�&�%�*�

��$�-��%�%�%�*�*�&�%�*�
��$�-��%�%�%�*�*�&�%�*�
��$�-��%�%�%�*�*�&�%�*�
��$�-��%�%�%�*�*�&�%�*�
��$�-��%�%�%�*�*�&�%�*�
��$�-��%�%�%�*�*�&�%�*�

��$�-��%�%�%�*�*�&�%�*�
��$�-��%�%�%�4�4�&�%�4�
��$�-��%�%�%���&�%��
��$�-���������r

Youez - 2016 - github.com/yon3zu
LinuXploit