mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-10-31 09:41:08 +00:00
Code Issues 32 Releases Wiki Activity

Fixed #20080 - Recommended use of PYTHONHASHSEED

Browse Source 
Thanks jacob for the suggestion and ryankask
for the patch.
This commit is contained in:
Tim Graham
2013-05-22 21:12:55 -04:00
parent b664cb818d
commit 8aca2504df
1 changed files with 15 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
docs/howto/deployment/checklist.txt
View File

@@ -212,3 +212,18 @@ Miscellaneous
--------------------------------
This setting is required if you're using the :ttag:`ssi` template tag.
Python Options
==============
If you're using Python 2.6.8+, it's strongly recommended that you invoke the
Python process running your Django application using the `-R`_ option or with
the :envvar:`PYTHONHASHSEED` environment variable set to ``random``.
These options help protect your site from denial-of-service (DoS)
attacks triggered by carefully crafted inputs. Such an attack can
drastically increase CPU usage by causing worst-case performance when
creating ``dict`` instances. See `oCERT advisory #2011-003
<http://www.ocert.org/advisories/ocert-2011-003.html>`_ for more information.
.. _-r: http://docs.python.org/2.7/using/cmdline.html#cmdoption-R