好久没写django了，记下之前的笔记1上线前检查pythonmanage.pycheck--deploy2设置DEBUG为False，配置ALLOWED_HOSTSDEBUG=FalseALLOWED_HOSTS=['*']3安全相关配置。#KeepHTTPSconnectiontimeSECURE_HSTS_SECONDS=3600SECURE_HSTS_INCLUDE_SUBDOMAINS=TrueSECURE_HSTS_PRELOAD=True#AutomaticallyredirecttosecureconnectionSECURE_SSL_REDIRECT=True#Avoidbrowser'scleverinferenceofcontenttype#SECURE_CONTENT_TYPE_NOSNIFF=True#Avoidcross-sitescriptingattackthroughFIERSSonlySECURE_BROWSHTTPSfortransmissionSESSION_COOKIE_SECURE=TrueCSRF_COOKIE_SECURE=True#防止点击劫持攻击-修改HTTP协议响应头#当前网站不允许使用
