Re: [Technical Board?] Project Ideas, and beginning GSoC 2023.

2022-11-28 Thread 'John Whitlock' via Django developers (Contributions to Django itself)
I'd like to see database-level defaults supported in models and migrations: https://code.djangoproject.com/ticket/470 There's currently a PR open, which replaces an earlier 2020 PR https://github.com/django/django/pull/16092 It would be a large benefit to those of us practicing continuous

Re: Why using django.contrib.sessions as the salt to encode session data? why not secret key?

2022-10-05 Thread 'John Whitlock' via Django developers (Contributions to Django itself)
Looking at the code, the hard-coded salt seems OK to me. The encoding is done by SessionBase.encode() , which calls dumps() from django.core.signing