From 04a0f7888408ba3473c12eb7c2230fc82a042d80 Mon Sep 17 00:00:00 2001 From: CoprDistGit Date: Fri, 24 Feb 2023 07:18:26 +0000 Subject: automatic import of python3-django-debreach --- .gitignore | 1 + python-django-debreach.spec | 104 ++++++++++++++++++++++++++++++++++++++++++++ sources | 1 + 3 files changed, 106 insertions(+) create mode 100644 python-django-debreach.spec create mode 100644 sources diff --git a/.gitignore b/.gitignore index e69de29..55d85e5 100644 --- a/.gitignore +++ b/.gitignore @@ -0,0 +1 @@ +/django-debreach-2.1.0.tar.gz diff --git a/python-django-debreach.spec b/python-django-debreach.spec new file mode 100644 index 0000000..75dc2d2 --- /dev/null +++ b/python-django-debreach.spec @@ -0,0 +1,104 @@ +%global _empty_manifest_terminate_build 0 +Name: python-django-debreach +Version: 2.1.0 +Release: 1 +Summary: Adds middleware to give some added protection against the BREACH attack in Django. +License: BSD License +URL: http://github.com/lpomfrey/django-debreach +Source0: https://mirrors.nju.edu.cn/pypi/web/packages/1f/1a/2bc5970d6b848c7ff4ab2932493a8e25bbed47f7668e4c3338152defc01a/django-debreach-2.1.0.tar.gz +BuildArch: noarch + + +%description +Extra mitigation against the `BREACH attack `_ +for Django projects. +django-debreach provides additional protection to Django's built in CSRF +token masking by randomising the content length of each response. This is +achieved by adding a random string of between 12 and 25 characters as a +comment to the end of the HTML content. Note that this will only be applied to +responses with a content type of ``text/html``. +When combined with the built-in mitigations in Django and rate limiting +(either in your web-server, or by using something like +`django-ratelimit `_), the +techniques here should provide a fairly comprehensive protection against the +BREACH attack. + +%package -n python3-django-debreach +Summary: Adds middleware to give some added protection against the BREACH attack in Django. +Provides: python-django-debreach +BuildRequires: python3-devel +BuildRequires: python3-setuptools +%description -n python3-django-debreach +Extra mitigation against the `BREACH attack `_ +for Django projects. +django-debreach provides additional protection to Django's built in CSRF +token masking by randomising the content length of each response. This is +achieved by adding a random string of between 12 and 25 characters as a +comment to the end of the HTML content. Note that this will only be applied to +responses with a content type of ``text/html``. +When combined with the built-in mitigations in Django and rate limiting +(either in your web-server, or by using something like +`django-ratelimit `_), the +techniques here should provide a fairly comprehensive protection against the +BREACH attack. + +%package help +Summary: Development documents and examples for django-debreach +Provides: python3-django-debreach-doc +%description help +Extra mitigation against the `BREACH attack `_ +for Django projects. +django-debreach provides additional protection to Django's built in CSRF +token masking by randomising the content length of each response. This is +achieved by adding a random string of between 12 and 25 characters as a +comment to the end of the HTML content. Note that this will only be applied to +responses with a content type of ``text/html``. +When combined with the built-in mitigations in Django and rate limiting +(either in your web-server, or by using something like +`django-ratelimit `_), the +techniques here should provide a fairly comprehensive protection against the +BREACH attack. + +%prep +%autosetup -n django-debreach-2.1.0 + +%build +%py3_build + +%install +%py3_install +install -d -m755 %{buildroot}/%{_pkgdocdir} +if [ -d doc ]; then cp -arf doc %{buildroot}/%{_pkgdocdir}; fi +if [ -d docs ]; then cp -arf docs %{buildroot}/%{_pkgdocdir}; fi +if [ -d example ]; then cp -arf example %{buildroot}/%{_pkgdocdir}; fi +if [ -d examples ]; then cp -arf examples %{buildroot}/%{_pkgdocdir}; fi +pushd %{buildroot} +if [ -d usr/lib ]; then + find usr/lib -type f -printf "/%h/%f\n" >> filelist.lst +fi +if [ -d usr/lib64 ]; then + find usr/lib64 -type f -printf "/%h/%f\n" >> filelist.lst +fi +if [ -d usr/bin ]; then + find usr/bin -type f -printf "/%h/%f\n" >> filelist.lst +fi +if [ -d usr/sbin ]; then + find usr/sbin -type f -printf "/%h/%f\n" >> filelist.lst +fi +touch doclist.lst +if [ -d usr/share/man ]; then + find usr/share/man -type f -printf "/%h/%f.gz\n" >> doclist.lst +fi +popd +mv %{buildroot}/filelist.lst . +mv %{buildroot}/doclist.lst . + +%files -n python3-django-debreach -f filelist.lst +%dir %{python3_sitelib}/* + +%files help -f doclist.lst +%{_docdir}/* + +%changelog +* Fri Feb 24 2023 Python_Bot - 2.1.0-1 +- Package Spec generated diff --git a/sources b/sources new file mode 100644 index 0000000..95b138b --- /dev/null +++ b/sources @@ -0,0 +1 @@ +08a080060b1659e70041ee4fcd728ba8 django-debreach-2.1.0.tar.gz -- cgit v1.2.3