
    df                     
   d dl Z d dlmZ ddlmZmZmZmZ  edd          Z edd	          Z	d
 Z
 eej        d          d             Z eej        d          d             Z eej                  d             ZdS )    N)settings   )ErrorTagsWarningregistera  You don't appear to be using Django's built-in cross-site request forgery protection via the middleware ('django.middleware.csrf.CsrfViewMiddleware' is not in your MIDDLEWARE). Enabling the middleware is the safest approach to ensure you don't leave any holes.zsecurity.W003idzYou have 'django.middleware.csrf.CsrfViewMiddleware' in your MIDDLEWARE, but you have not set CSRF_COOKIE_SECURE to True. Using a secure-only CSRF cookie makes it more difficult for network traffic sniffers to steal the CSRF token.zsecurity.W016c                      dt           j        v S )Nz)django.middleware.csrf.CsrfViewMiddleware)r   
MIDDLEWARE     \D:\Python Project\djangoTemplates\venv\Lib\site-packages\django/core/checks/security/csrf.py_csrf_middlewarer      s    6(:MMMr   T)deployc                 6    t                      }|rg nt          gS )N)r   W003app_configskwargspassed_checks      r   check_csrf_middlewarer      s    #%%L)22D6)r   c                 l    t           j        pt                       pt           j        du }|rg nt          gS )NT)r   CSRF_USE_SESSIONSr   CSRF_COOKIE_SECUREW016r   s      r   check_csrf_cookie_securer   #   sC     	" 	/!!!	/&$. 
 )22D6)r   c                    ddl m} g }	  |            }	 t          j        |                              d d            n# t
          $ r6 dt          j        z  }|                    t          |d                     Y nGw xY w# t          $ r6 dt          j        z  }|                    t          |d                     Y nw xY w|S )	Nr   )_get_failure_view)reasonzIThe CSRF failure view '%s' does not take the correct number of arguments.zsecurity.E101r	   z1The CSRF failure view '%s' could not be imported.zsecurity.E102)django.middleware.csrfr   inspect	signaturebind	TypeErrorr   CSRF_FAILURE_VIEWappendr   ImportError)r   r   r   errorsviewmsgs         r   check_csrf_failure_viewr,   -   s   888888F:  ""	:d##((d(;;;; 	: 	: 	:'9:  MM%88899999	:  6 6 6?() 	 	eCO444555556 Ms    
B )? =A?>A?=CC)r"   django.confr    r   r   r   r   r   r   r   securityr   r   r,   r   r   r   <module>r0      s$                - - - - - - - - - - - -w+
    w0   N N N 
$-%%%* * &%*
 
$-%%%* * &%* 
$-    r   