Re: Why are session cookies not considered sensitive?

[Florian Apolloner]

Hi,

I agree that we should treat session cookies as sensitive and hide them 
like we do with passwords. That said, please be aware that all the 
SafeException reporters are best effort and it is generally not possible to 
have a "safe" exception.

In that sense, patches welcome but we are not going to treat this as 
security issue (ie no backporting).

Cheers,
Florian

On Monday, January 17, 2022 at 10:09:07 PM UTC+1 Tobias Bengfort wrote:

> Hi,
>
> AFAIU, SafeExceptionReporterFilter takes care of removing any sensitive 
> data from logs. However, I today realized that this does not cover 
> session cookies.
>
> In a ticket about this issue[1] it was treated not as a security issue 
> but more as a request for customization. That puzzled me a bit. Why are 
> session cookies not treated as sensitive, just like passwords are?
>
> thanks,
> tobias
>
>
> [1]: https://code.djangoproject.com/ticket/29714
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers  (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-developers/a2b299d1-6700-487d-ae45-37c6612e33ffn%40googlegroups.com.

Re: Contributions

['Adam Johnson' via Django developers (Contributions to Django itself)]

I don't think there's much info about GSoC at this stage. Normally Carlton
(one of the fellows) creates a wiki page gathering the info we have, closer
to the time. The 2022 one isn't up yet, but here's the 2021 one:
https://code.djangoproject.com/wiki/SummerOfCode2021 . I imagine things
will be broadly similar this year.

On Tue, 18 Jan 2022 at 03:12, Shubham Walunj  wrote:

> Hey, Adam can you tell more about participation of django organisation in
> GSOC'22
>
> On Thursday, January 13, 2022 at 11:47:47 PM UTC+5:30 Adam Johnson wrote:
>
>> Welcome!
>>
>> There are many different ways to contribute to Django - the forum,
>> blogging, translating, documenting, writing code, and more. Our
>> Contributing Guide can help you get started with many of these:
>> https://docs.djangoproject.com/en/stable/internals/contributing/
>>
>> If you’re looking to work with the code base (for documentation or code),
>> check out the “Advice for New Contributors” section:
>> https://docs.djangoproject.com/en/stable/internals/contributing/new-contributors/
>> . Then see if you can work through the “Writing Your First Patch” tutorial:
>> https://docs.djangoproject.com/en/stable/intro/contributing/ .
>>
>> If you get stuck or have questions, post back here or in the “Mentorship”
>> section on the forum:
>> https://forum.djangoproject.com/c/internals/mentorship/10
>>
>> Hope that helps,
>>
>> Adam
>>
>> On Thu, 13 Jan 2022 at 09:34, rohith gurram  wrote:
>>
>>> Hello everyone,
>>> I am sorry to send this message but i am a beginner in web development
>>> field from IIIT TRICHY 2nd year and started working using django.I wanted
>>> to contribute in django but I dont know where and how to start. I also
>>> wanted to take part in GSOC 22.Could any one guide me.
>>>
>>> Thanking you,
>>> Rohith Gurram.
>>>
>>> --
>>> You received this message because you are subscribed to the Google
>>> Groups "Django developers (Contributions to Django itself)" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to django-develop...@googlegroups.com.
>>> To view this discussion on the web visit
>>> https://groups.google.com/d/msgid/django-developers/7193ddcd-5f94-4303-a9e7-c8d0fd3e7915n%40googlegroups.com
>>> 
>>> .
>>>
>> --
> You received this message because you are subscribed to the Google Groups
> "Django developers (Contributions to Django itself)" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to django-developers+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/django-developers/e967cd87-6464-4337-8eb7-606fdd1cdf28n%40googlegroups.com
> 
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers  (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-developers/CAMyDDM2qyJVEkvVWi6f2O5Xd_J6jREPAXK-XEfJES_ZAZA6R-Q%40mail.gmail.com.

Please help me to find this page

[Tilak Agrawal]

Hello, I am Tilak, I saw something to be corrected in this page  Writing 
your first patch for Django | Django documentation | Django 
(djangoproject.com) 
 . I was trying 
to find this page in docs folder but I can't find it. Please help to get 
that file.

I have downloaded Django in my local machine and also created a new git 
branch for personal edits.

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers  (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-developers/77ac31aa-b21f-4f41-a575-cea525e55cc5n%40googlegroups.com.

Re: Please help me to find this page

[Mariusz Felisiak]

See docs/intro/contributing.txt 


-- 
You received this message because you are subscribed to the Google Groups 
"Django developers  (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-developers/013666e1-aaf2-4cc6-957c-67d5beb63a7an%40googlegroups.com.

Re: Please help me to find this page

[Dylan Reinhold]

https://docs.djangoproject.com/en/dev/intro/contributing/

On Tue, Jan 18, 2022 at 10:08 AM Mariusz Felisiak <
felisiak.mari...@gmail.com> wrote:

> See docs/intro/contributing.txt
> 
>
> --
> You received this message because you are subscribed to the Google Groups
> "Django developers (Contributions to Django itself)" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to django-developers+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/django-developers/013666e1-aaf2-4cc6-957c-67d5beb63a7an%40googlegroups.com
> 
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers  (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-developers/CAHtg44A_3PetGZ0x%2BN7Y66%3D-obsVWeRis9%3DCwnFRs3JWdkMyyw%40mail.gmail.com.