Re: [Django] #30356: HSTS disabled in admin pages

[Django]

#30356: HSTS disabled in admin pages
+--
 Reporter:  ObserverOfTime  |Owner:  nobody
 Type:  Bug |   Status:  closed
Component:  Uncategorized   |  Version:  2.1
 Severity:  Normal  |   Resolution:  invalid
 Keywords:  | Triage Stage:  Unreviewed
Has patch:  0   |  Needs documentation:  0
  Needs tests:  0   |  Patch needs improvement:  0
Easy pickings:  0   |UI/UX:  0
+--
Changes (by ObserverOfTime):

 * resolution:  needsinfo => invalid


-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To post to this group, send email to django-updates@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/072.ad14e58ebb4cf24a12b55b4fd3ea7233%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Re: [Django] #30356: HSTS disabled in admin pages

[Django]

#30356: HSTS disabled in admin pages
+--
 Reporter:  ObserverOfTime  |Owner:  nobody
 Type:  Bug |   Status:  closed
Component:  Uncategorized   |  Version:  2.1
 Severity:  Normal  |   Resolution:  needsinfo
 Keywords:  | Triage Stage:  Unreviewed
Has patch:  0   |  Needs documentation:  0
  Needs tests:  0   |  Patch needs improvement:  0
Easy pickings:  0   |UI/UX:  0
+--
Description changed by ObserverOfTime:

Old description:

> I've made a [https://arc-relight.site site] using {{{Django v2.1.7}}} &
> {{{nginx v1.10.3}}} and I've set the {{{Strict-Transport-Security}}}
> header in nginx:
>
> {{{
> add_header Strict-Transport-Security
> "max-age=15768000; includeSubDomains; preload" always;
> }}}
>
> The header shows up as expected when querying any page, except for pages
> under {{{/admin}}}.
> Not sure if this is a bug in Django or nginx, or if I messed something
> up.

New description:

 I've made a [https://arc-relight.site site] using {{{Django v2.1.7}}} &
 {{{nginx v1.10.3}}} and I've set the {{{Strict-Transport-Security}}}
 header in nginx:

 {{{
 add_header Strict-Transport-Security
 "max-age=15768000; includeSubDomains; preload" always;
 }}}

 The header shows up as expected when querying any page, except for pages
 under {{{/admin}}}.
 Not sure if this is a bug in Django or nginx, or if I messed something up.

 Update: turns out nginx was not inheriting the header in that path so it's
 not a Django bug.

--

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To post to this group, send email to django-updates@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/072.da07c754e500a0c9eab77fb2d4a9eeb5%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Re: [Django] #30356: HSTS disabled in admin pages

[Django]

#30356: HSTS disabled in admin pages
+--
 Reporter:  ObserverOfTime  |Owner:  nobody
 Type:  Bug |   Status:  closed
Component:  Uncategorized   |  Version:  2.1
 Severity:  Normal  |   Resolution:  needsinfo
 Keywords:  | Triage Stage:  Unreviewed
Has patch:  0   |  Needs documentation:  0
  Needs tests:  0   |  Patch needs improvement:  0
Easy pickings:  0   |UI/UX:  0
+--
Changes (by Tim Graham):

 * status:  new => closed
 * resolution:   => needsinfo


Comment:

 This ticket tracker isn't a [wiki:TicketClosingReasons/UseSupportChannels
 support channel] to debug issues. You need to investigate the problem
 yourself and explain why Django is at fault.

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To post to this group, send email to django-updates@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/072.1e7d53eab2f1b503decba97ff3abb4e8%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.