Removed the requirement for SSL

As heroku does not currently offer a free SSL add-on, initial
development should assume that SSL is NOT there.
This commit is contained in:
Lyla Fischer 2013-10-28 14:02:56 -04:00
parent 566c7b1c58
commit e5dac53f92

View File

@ -343,7 +343,7 @@ class Production(Common):
SECURE_FRAME_DENY = values.BooleanValue(True)
SECURE_CONTENT_TYPE_NOSNIFF = values.BooleanValue(True)
SECURE_BROWSER_XSS_FILTER = values.BooleanValue(True)
SESSION_COOKIE_SECURE = values.BooleanValue(True)
SESSION_COOKIE_SECURE = values.BooleanValue(False)
SESSION_COOKIE_HTTPONLY = values.BooleanValue(True)
SECURE_SSL_REDIRECT = values.BooleanValue(True)
########## end django-secure