Tag Info

New answers tagged

1

If all you need to do is paste that link into the browser and you're redirected to http://security.stackexchange.com then yes it is a vulnerability. The seriousness of the vulnerability depends on the expectations of the site and how much a user trusts it. If I can send some person a link to your site that contains a redirect to my malicious site, and they ...


-1

why do I not get a https redirect in the first 302 reply Bad programming on the part of of whoever designed the system - bobbing out of https makes it trivial to carry out a MITM attack on the connection. How can I get it to connect to the next server in the chain leading to the final one Use a better program. HTTP is deceptively complex. You can ...


0

In most cases you can set Apache or something to redirect to https, as described in the accepted answer. And if you can, that would be better, for performance and for files served outside Django. But if you cannot, or want to do debugging, then I would like to point out that Django recently (1.8) introduced a SecurityMiddleware which has https-redirects as ...



Top 50 recent answers are included