News for hackers. Stuff that matters.

A comment on Security advisory: Breach and Django. Parent comment

Re:Security advisory: Breach and Django by homakov on Tuesday August 06, 2013 @10:56AM (#6166887)
sorry, I think in terms of Rails, in rails a session is a _site_sess cookie... i am not sure how it works in Django but what here is a post about it http://homakov.blogspot.com/2013/06/cookie-forcing-protectio...

https://github.com/mozilla/django-session-csrf seems ok, should be default

[ Parent | on HN ]
Re:Security advisory: Breach and Django by JshWright on Tuesday August 06, 2013 @11:03AM (#6166944)
"i am not sure how it works in Django"

Perhaps you should do a little research before proclaiming things insecure?

[ Parent | on HN ]
Re:Security advisory: Breach and Django by homakov on Tuesday August 06, 2013 @11:27AM (#6167087)
bitbucket is vulnerable > django has a problem

if it's not enough:

some websites from http://www.djangosites.org/ are vulnerable > django has a problem

[ Parent | on HN ]