BSD Ports

www/py-django-debreach 2.1.0_1 DragonFly

Adds protection against the BREACH attack in Django

System
DragonFly
Repository
DPorts
Maintainer
[email protected] (as in FreeBSD)
License
BSD2CLAUSE
Categories
python, security, www
Package size
9.4 KiB, 39.7 KiB installed

Description

Basic/extra mitigation against the BREACH attack for Django projects.

django-debreach provides additional protection to Django's built in CSRF token masking by randomizing the content length of each response.

This is achieved by adding a random string of between 12 and 25 characters as a comment to the end of the HTML content. Note that this will only be applied to responses with a content type of text/html.

In the other systems

The newest version among them is 2.1.0, as upstream numbers it.

SystemPortVersionVulnerabilitiesStatusMaintainerLast update
DragonFlywww/py-django-debreach2.1.0_1 newestnone known-[email protected]-
FreeBSDwww/py-django-debreach2.1.0_2 newestnone known-[email protected]-
HardenedBSDwww/py-django-debreach2.1.0_2 newestno data-[email protected]-
GhostBSDwww/py-django-debreach2.1.0_2 newestno data-[email protected]-

Install

Binary package:

pkg install py311-django-debreach

From DPorts:

cd /usr/dports/www/py-django-debreach && make install clean

Dependency graph

Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.

Dependencies

Run dependencies 1
Required by 1