Re: Adding a security concerned feature

2020-12-02 Thread Daryl
My 2c: The analogy is pretty straightforward here; - changing the admin URL is like putting your house's front door key slot in a strange, unique place, so that additional *knowledge* is required to unlock it. - django-axes, fail2ban, etc is like having a bouncer standing beside the door,

Re: Adding a security concerned feature

2020-12-02 Thread 'Aaron C. de Bruyn' via Django developers (Contributions to Django itself)
On Wed, Dec 2, 2020 at 9:23 AM Collin Anderson wrote: > > combination of blocking IPs and having a different admin URL would raise > the bar quite a bit. > > So having a different default admin URL would help, right? > Sure. But so would disconnecting the network cable from your server. :)

Re: Quick Filter in the Admin Sidebar

2020-12-02 Thread Collin Anderson
I think this would be really helpful. Looking at the code in the gist, that looks about right. It's not too complicated and the basic toLowerCase()/indexOf() method of search should hopefully be enough (it's what I would do if I were implementing this!). I'd suggest adding some sort of clear

Re: Adding a security concerned feature

2020-12-02 Thread Collin Anderson
> combination of blocking IPs and having a different admin URL would raise the bar quite a bit. So having a different default admin URL would help, right? On Wed, Nov 25, 2020 at 10:11 AM 'Aaron C. de Bruyn' via Django developers (Contributions to Django itself) wrote: > That's security

Re: include_block template tag

2020-12-02 Thread Jure Erznožnik
Final comment for this: we implemented the tag in our dynamicforms library (commit with initial implementation ). The initial implementation straight-out replaces the django include tag, giving it an