Re: Rethink (?) how we handle security headers.

2021-01-18 Thread Tim Graham
The proposal seems to be a setting of the form: SECURITY_HEADERS = { 'Strict-Transport-Security': 'max-age=60; includeSubDomains; preload', ... } Currently we have system checks to suggest setting SECURE_HSTS_SECONDS, SECURE_HSTS_PRELOAD, etc. Do you envision trying to keep these checks

Re: Fellow Reports - January 2021

2021-01-18 Thread Mariusz Felisiak
Week ending January 17, 2021 *Triaged:* https://code.djangoproject.com/ticket/32341 - forms.ModelMultipleChoiceField raises TypeError with empty_label argument. (invalid) https://code.djangoproject.com/ticket/32342 - Enable supports_index_column_ordering on MySQL 8.0.1+ (created) https