From 689e22f5b01da10231d749a8febb252b09bfc56c Mon Sep 17 00:00:00 2001 From: Andrew Chen Wang <60190294+Andrew-Chen-Wang@users.noreply.github.com> Date: Thu, 23 Jul 2020 22:47:20 -0400 Subject: [PATCH 1/2] Be explicit in context processor --- .../{{cookiecutter.project_slug}}/utils/context_processors.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/{{cookiecutter.project_slug}}/{{cookiecutter.project_slug}}/utils/context_processors.py b/{{cookiecutter.project_slug}}/{{cookiecutter.project_slug}}/utils/context_processors.py index de405076f..def96787f 100644 --- a/{{cookiecutter.project_slug}}/{{cookiecutter.project_slug}}/utils/context_processors.py +++ b/{{cookiecutter.project_slug}}/{{cookiecutter.project_slug}}/utils/context_processors.py @@ -2,4 +2,5 @@ from django.conf import settings def settings_context(_request): - return {"settings": settings} + # Be explicit + return {"DEBUG": settings.DEBUG} From c57b8976b09fcd6ec7f3ef095b4b967f3d68e8d3 Mon Sep 17 00:00:00 2001 From: Andrew Chen Wang <60190294+Andrew-Chen-Wang@users.noreply.github.com> Date: Fri, 24 Jul 2020 11:29:11 -0400 Subject: [PATCH 2/2] Update {{cookiecutter.project_slug}}/{{cookiecutter.project_slug}}/utils/context_processors.py Co-authored-by: Bruno Alla --- .../{{cookiecutter.project_slug}}/utils/context_processors.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/{{cookiecutter.project_slug}}/{{cookiecutter.project_slug}}/utils/context_processors.py b/{{cookiecutter.project_slug}}/{{cookiecutter.project_slug}}/utils/context_processors.py index def96787f..3c5351418 100644 --- a/{{cookiecutter.project_slug}}/{{cookiecutter.project_slug}}/utils/context_processors.py +++ b/{{cookiecutter.project_slug}}/{{cookiecutter.project_slug}}/utils/context_processors.py @@ -2,5 +2,7 @@ from django.conf import settings def settings_context(_request): - # Be explicit + """Settings available by default to the templates context.""" + # Note: we intentionally do NOT expose the entire settings + # to prevent accidental leaking of sensitive information return {"DEBUG": settings.DEBUG}