plain 0.11.0__py3-none-any.whl → 0.12.0__py3-none-any.whl

plain/preflight/__init__.py

@@ -15,8 +15,7 @@ from .registry import register, run_checks
 
 # Import these to force registration of checks
 import plain.preflight.files  # NOQA isort:skip
-import plain.preflight.security.base  # NOQA isort:skip
-import plain.preflight.security.csrf  # NOQA isort:skip
+import plain.preflight.security  # NOQA isort:skip
 import plain.preflight.urls  # NOQA isort:skip
 
 

plain/preflight/{security/base.py → security.py}

@@ -16,40 +16,6 @@ SECRET_KEY_WARNING_MSG = (
     f"vulnerable to attack."
 )
 
-# TODO
-W001 = Warning(
-    "You do not have 'plain.middleware.https.HttpsRedirectMiddleware' "
-    "in your MIDDLEWARE so the SECURE_HSTS_SECONDS, "
-    "SECURE_CONTENT_TYPE_NOSNIFF, SECURE_REFERRER_POLICY, "
-    "SECURE_CROSS_ORIGIN_OPENER_POLICY, and HTTPS_REDIRECT_ENABLED settings will "
-    "have no effect.",
-    id="security.W001",
-)
-
-W008 = Warning(
-    "Your HTTPS_REDIRECT_ENABLED setting is not set to True. "
-    "Unless your site should be available over both SSL and non-SSL "
-    "connections, you may want to either set this setting True "
-    "or configure a load balancer or reverse-proxy server "
-    "to redirect all connections to HTTPS.",
-    id="security.W008",
-)
-
-W009 = Warning(
-    SECRET_KEY_WARNING_MSG % "SECRET_KEY",
-    id="security.W009",
-)
-
-W018 = Warning(
-    "You should not have DEBUG set to True in deployment.",
-    id="security.W018",
-)
-
-W020 = Warning(
-    "ALLOWED_HOSTS must not be empty in deployment.",
-    id="security.W020",
-)
-
 W025 = Warning(SECRET_KEY_WARNING_MSG, id="security.W025")
 
 
@@ -69,7 +35,16 @@ def check_secret_key(package_configs, **kwargs):
         passed_check = False
     else:
         passed_check = _check_secret_key(secret_key)
-    return [] if passed_check else [W009]
+    return (
+        []
+        if passed_check
+        else [
+            Warning(
+                SECRET_KEY_WARNING_MSG % "SECRET_KEY",
+                id="security.W009",
+            )
+        ]
+    )
 
 
 @register(deploy=True)
@@ -91,9 +66,27 @@ def check_secret_key_fallbacks(package_configs, **kwargs):
 @register(deploy=True)
 def check_debug(package_configs, **kwargs):
     passed_check = not settings.DEBUG
-    return [] if passed_check else [W018]
+    return (
+        []
+        if passed_check
+        else [
+            Warning(
+                "You should not have DEBUG set to True in deployment.",
+                id="security.W018",
+            )
+        ]
+    )
 
 
 @register(deploy=True)
 def check_allowed_hosts(package_configs, **kwargs):
-    return [] if settings.ALLOWED_HOSTS else [W020]
+    return (
+        []
+        if settings.ALLOWED_HOSTS
+        else [
+            Warning(
+                "ALLOWED_HOSTS must not be empty in deployment.",
+                id="security.W020",
+            )
+        ]
+    )

{plain-0.11.0.dist-info → plain-0.12.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: plain
-Version: 0.11.0
+Version: 0.12.0
 Summary: A web framework for building products with Python.
 Author: Dave Gaeddert
 Author-email: dave.gaeddert@dropseed.dev

{plain-0.11.0.dist-info → plain-0.12.0.dist-info}/RECORD

@@ -61,13 +61,11 @@ plain/packages/config.py,sha256=6Vdf1TEQllZkkEvK0WK__zHJYT9nxmS3EyYrbuq0GkM,1120
 plain/packages/registry.py,sha256=Bihdu1sOVslmb2CHAJbMqqzsLIPn0FkqwHoD_JrfZy4,17936
 plain/paginator.py,sha256=4v5SbYotJH9HoNdzf-1j-AEy4ZLbLPuysf-VME4-6e0,6055
 plain/preflight/README.md,sha256=fgcfVRD6rq7IO8AffQhk49c-6akxaE8MQidRp69InDQ,59
-plain/preflight/__init__.py,sha256=jQuVhsC8FCEEMTKV1HK3mYz0cD03bI_3_evKcW4X8hw,668
+plain/preflight/__init__.py,sha256=H-TNRvaddPtOGmv4RXoc1fxDV1AOb7_K3u7ECF8mV58,607
 plain/preflight/files.py,sha256=wbHCNgps7o1c1zQNBd8FDCaVaqX90UwuvLgEQ_DbUpY,510
 plain/preflight/messages.py,sha256=u0oc7q7YmBlKYJRcF5SQpzncfOkEzDhZTcpyclQDfHg,2427
 plain/preflight/registry.py,sha256=ZpxnZPIklXuT8xZVTxCUp_IER3zhd7DdfsmqIpAbLj4,2306
-plain/preflight/security/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-plain/preflight/security/base.py,sha256=nsv-g-bFr_188mkOQwC1ZDnyS0rE6eZED8xZT-FEM8M,3074
-plain/preflight/security/csrf.py,sha256=8dKzs5kQwTTKeyfHbkrzdPk3OEoUN8mc-0xhSBo1KmM,1175
+plain/preflight/security.py,sha256=n4X71leOFKqalvEPH3QwVzMs5FB7xu840EEYpLj6Ymw,2617
 plain/preflight/urls.py,sha256=O4PQ_v205VA2872fQlhPfxaihDDRCsVp0ZVKQ92aX4k,3019
 plain/runtime/README.md,sha256=Q8VVO7JRGuYrDxzuYL6ptoilhclbecxKzpRXKgbWGkU,2061
 plain/runtime/__init__.py,sha256=DH8TwKTGJhjviOy4yh_d051v8YGaAWMlFBPhK8ZuC9g,1499
@@ -141,8 +139,8 @@ plain/views/objects.py,sha256=9QBYyb8PgkRirXCQ8-Pms4_yMzP37dfeL30hWRYmtZg,7909
 plain/views/redirect.py,sha256=KLnlktzK6ZNMTlaEiZpMKQMEP5zeTgGLJ9BIkIJfwBo,1733
 plain/views/templates.py,sha256=nF9CcdhhjAyp3LB0RrSYnBaHpHzMfPSw719RCdcXk7o,2007
 plain/wsgi.py,sha256=R6k5FiAElvGDApEbMPTT0MPqSD7n2e2Az5chQqJZU0I,236
-plain-0.11.0.dist-info/LICENSE,sha256=m0D5O7QoH9l5Vz_rrX_9r-C8d9UNr_ciK6Qwac7o6yo,3175
-plain-0.11.0.dist-info/METADATA,sha256=tRnc7WP5pznuQMZQYEQXwyhi6cLywdRkcSikq-Vu9QI,2722
-plain-0.11.0.dist-info/WHEEL,sha256=Nq82e9rUAnEjt98J6MlVmMCZb-t9cYE2Ir1kpBmnWfs,88
-plain-0.11.0.dist-info/entry_points.txt,sha256=7O1RZTmMasKYB73bfqQcTwIhsXo7RjEIKv2WbtTtOIM,39
-plain-0.11.0.dist-info/RECORD,,
+plain-0.12.0.dist-info/LICENSE,sha256=m0D5O7QoH9l5Vz_rrX_9r-C8d9UNr_ciK6Qwac7o6yo,3175
+plain-0.12.0.dist-info/METADATA,sha256=eaEqCJ_ZZATzE_wZcodAprf9OO-aru1xTeWRADCCeMo,2722
+plain-0.12.0.dist-info/WHEEL,sha256=Nq82e9rUAnEjt98J6MlVmMCZb-t9cYE2Ir1kpBmnWfs,88
+plain-0.12.0.dist-info/entry_points.txt,sha256=7O1RZTmMasKYB73bfqQcTwIhsXo7RjEIKv2WbtTtOIM,39
+plain-0.12.0.dist-info/RECORD,,

plain/preflight/security/csrf.py

@@ -1,36 +0,0 @@
-from plain.runtime import settings
-
-from .. import Warning, register
-
-W003 = Warning(
-    "You don't appear to be using Plain's built-in "
-    "cross-site request forgery protection via the middleware "
-    "('plain.csrf.middleware.CsrfViewMiddleware' is not in your "
-    "MIDDLEWARE). Enabling the middleware is the safest approach "
-    "to ensure you don't leave any holes.",
-    id="security.W003",
-)
-
-W016 = Warning(
-    "You have 'plain.csrf.middleware.CsrfViewMiddleware' in your "
-    "MIDDLEWARE, but you have not set CSRF_COOKIE_SECURE to True. "
-    "Using a secure-only CSRF cookie makes it more difficult for network "
-    "traffic sniffers to steal the CSRF token.",
-    id="security.W016",
-)
-
-
-def _csrf_middleware():
-    return "plain.csrf.middleware.CsrfViewMiddleware" in settings.MIDDLEWARE
-
-
-@register(deploy=True)
-def check_csrf_middleware(package_configs, **kwargs):
-    passed_check = _csrf_middleware()
-    return [] if passed_check else [W003]
-
-
-@register(deploy=True)
-def check_csrf_cookie_secure(package_configs, **kwargs):
-    passed_check = not _csrf_middleware() or settings.CSRF_COOKIE_SECURE is True
-    return [] if passed_check else [W016]