Hardcoded SECRET_KEY

Hardcoded SECRET_KEY An architecture diagram generated by Archify. Hardcoded SECRET_KEY · Architecture component Hardcoded SECRET_KEY ImproperlyConfigured raised · DJANGO_ALLOW_INSECURE_DEV_KEY opt-in · Architecture component ImproperlyConfigured raised DJANGO_ALLOW_INSECURE_DEV_KEY opt-in DEBUG=True hardcoded · Architecture component DEBUG=True hardcoded _env_bool(DJANGO_DEBUG, Fa… · Architecture component _env_bool(DJANGO_DEBUG, Fa… ALLOWED_HOSTS=[] · Architecture component ALLOWED_HOSTS=[] env-driven allowlist · Docker-aware defaults · Architecture component env-driven allowlist Docker-aware defaults CORS_ALLOW_ALL_ORIGINS · Architecture component CORS_ALLOW_ALL_ORIGINS explicit allowlist · DJANGO_CORS_ALLOW_ALL=1 escape hatch · Architecture component explicit allowlist DJANGO_CORS_ALLOW_ALL=1 escape hatch IDOR: buy used body user_id · Architecture component IDOR: buy used body user_id IsAuthenticated · request.user only qty 1-1000 · Architecture component IsAuthenticated request.user only qty 1-1000 reseed/manage_settings pub… · Architecture component reseed/manage_settings pub… IsAdminUser · X-Admin-Token double-gate · Architecture component IsAdminUser X-Admin-Token double-gate Legend Backend Security External

Source summary

  • • 12 of 22 nodes shown
  • • 0 links preserved in the original
  • • Hardcoded SECRET_KEY
  • • ImproperlyConfigured raised