BSD Ports

www/py-django-debreach 2.1.0_2 FreeBSD

Adds protection against the BREACH attack in Django

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
License
BSD2CLAUSE
Categories
www, security, python
Package size
10.8 KiB, 38.3 KiB installed

Description

Basic/extra mitigation against the BREACH attack for Django projects.

django-debreach provides additional protection to Django's built in CSRF token masking by randomizing the content length of each response.

This is achieved by adding a random string of between 12 and 25 characters as a comment to the end of the HTML content. Note that this will only be applied to responses with a content type of text/html.

In the other systems

SystemPortVersion
FreeBSDwww/py-django-debreach2.1.0_2
DragonFlywww/py-django-debreach2.1.0_1
HardenedBSDwww/py-django-debreach2.1.0_2
GhostBSDwww/py-django-debreach2.1.0_2

Install

Binary package:

pkg install py312-django-debreach

From the ports tree:

cd /usr/ports/www/py-django-debreach/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	py312-django-debreach>0:www/py-django-debreach

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest2.1.0_22.1.0_22.1.02.1.0_12.1.0_2
FreeBSD:14:quarterly2.1.0_22.1.0_2n/a2.1.0_12.1.0_2
FreeBSD:15:latest2.1.0_22.1.0_2n/a2.1.0_12.1.0_1
FreeBSD:15:quarterly2.1.0_22.1.0_2n/an/an/a
FreeBSD:16:latest2.1.0_22.1.0_2n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

As this port's Makefile names them.

Build 2

Test 1

The full lists below include those, and their dependencies in turn.

Build dependencies 17
Run dependencies 7
Required by 1

Configuration

No options to configure.

USES
python
Service scripts
none

Files

distinfo 1
FileSizeSHA256
django-debreach-2.1.0.tar.gz15616aeac9f43e0ea97830bed69cb309ad5746b5ed2b9dce733ac4c136c8e16a7d6e5
Master sites 1
  • PYPI

Commit history 0

No commits in the history this site was built from.