amorfo77/paperless-ngx
1
0
Fork 0
mirror of https://github.com/paperless-ngx/paperless-ngx.git synced 2026-04-24 08:59:26 +00:00
Code Issues Projects Releases Wiki Activity

Security: Rejects a default secret key where the user did not, in fact, change-me (#12630)

Browse Source
This commit is contained in:
Trenton H
2026-04-23 09:11:41 -07:00
committed by GitHub
parent 1a3b56496a
commit aab03501c2
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/paperless/settings/__init__.py
View File

@@ -463,10 +463,11 @@ SECURE_PROXY_SSL_HEADER = (
else None
)
SECRET_KEY = os.getenv("PAPERLESS_SECRET_KEY", "")
if not SECRET_KEY: # pragma: no cover
SECRET_KEY = os.getenv("PAPERLESS_SECRET_KEY")
_INSECURE_SECRET_KEYS = {None, "", "change-me"}
if not DEBUG and SECRET_KEY in _INSECURE_SECRET_KEYS: # pragma: no cover
raise ImproperlyConfigured(
"PAPERLESS_SECRET_KEY is not set. "
"PAPERLESS_SECRET_KEY is not set or is the default 'change-me' value. "
"A unique, secret key is required for secure operation. "
'Generate one with: python3 -c "import secrets; print(secrets.token_urlsafe(64))"',
)