Re: Templates vs. source code

2020-05-29 Thread אורי
Thank you. אורי u...@speedy.net On Fri, May 29, 2020 at 12:56 PM Sencer Hamarat wrote: > Hi Uri, > Never expose whole settings anytime. settings is always includes sensitive > data. At least DB access key and Django's secret value. > This attitude is highly vulnerable. Anyone could access those

Re: Templates vs. source code

2020-05-29 Thread Sencer Hamarat
Hi Uri, Never expose whole settings anytime. settings is always includes sensitive data. At least DB access key and Django's secret value. This attitude is highly vulnerable. Anyone could access those sensitive data via response headers if you don't play settings without cautious. Saygılarımla, Se

Templates vs. source code

2020-05-28 Thread אורי
Django users, There was a discussion in Stack Overflow related to an answer of mine - how to access settings from templates in Django [ https://stackoverflow.com/a/53953578/1412564]. And I would like to know - is it generally unsafe to expose all my settings to templates and why? Should I use the