<filename>config/settings.py
SERVER_PORT = 8080
SERVER_DOMAIN = "localhost"
SERVER_EMAIL = "<EMAIL>"
SERVER_BASE = "http://127.0.0.1:8080/"

LOGS_PATH = "server-logs/"
TEMPLATES_PATH = "templates/"
STATIC_PATH = "static/"
TMP_PATH = "tmp/"
DEFAULT_DOCUMENT = "index.html"

PUBLIC_LOGS = False
X_POWERED_BY = True
ALLOW_SYMLINKS = False

ALLOW_TEMPLATE_EXEC = True
ALLLOW_TEMPLATE_SYSTEM = True

CORS_ENABLED = True
CORS_CREDENTIALS = False
CORS_ORIGIN = ["localhost", "test.com"]

FRAME_OPTIONS = "deny"
ALLOWED_HOSTS = []

XSS_PROTECTION_HEADER = True
XSS_PROTECTION_MODE = "block"
XSS_PROTECTION_REPORT_URI = False

BLOCKED_PATHS = [
    '/admin',
    '/static/css'
]

<filename>config/settings.py
SERVER_PORT = 8080
SERVER_DOMAIN = "localhost"
SERVER_EMAIL = "<EMAIL>"
SERVER_BASE = "http://127.0.0.1:8080/"

LOGS_PATH = "server-logs/"
TEMPLATES_PATH = "templates/"
STATIC_PATH = "static/"
TMP_PATH = "tmp/"
DEFAULT_DOCUMENT = "index.html"

PUBLIC_LOGS = False
X_POWERED_BY = True
ALLOW_SYMLINKS = False

ALLOW_TEMPLATE_EXEC = True
ALLLOW_TEMPLATE_SYSTEM = True

CORS_ENABLED = True
CORS_CREDENTIALS = False
CORS_ORIGIN = ["localhost", "test.com"]

FRAME_OPTIONS = "deny"
ALLOWED_HOSTS = []

XSS_PROTECTION_HEADER = True
XSS_PROTECTION_MODE = "block"
XSS_PROTECTION_REPORT_URI = False

BLOCKED_PATHS = [
    '/admin',
    '/static/css'
]
