Comments (2)
scriptsrc
commented on May 22, 2024
These are NOT your AWS secret keys.
SECRET_KEY
http://flask.pocoo.org/docs/api/#flask.Flask.secret_key
Set this to a complex random value when you want to use the secure cookie for instance.
This is just some random string that is used to sign cookies for user sessions.
SECURITY_PASSWORD_SALT
https://pythonhosted.org/Flask-Security/configuration.html
Specifies the HMAC salt. This is only used if the password hash type is set to something other than plain text. Defaults to None.
This is another random string that is used to salt passwords before they are hashed and placed into the database.
The output from a random password generator should be sufficient for both of these fields.
from security_monkey.
airforceboricua
commented on May 22, 2024
Thank you for the response. This was very helpful!
from security_monkey.
Related Issues (20)
- not getting description of Unknown issue HOT 2
- Problemas al ejecutar pub get
- Error al ejecutar Pub build HOT 2
- Ubuntu- Create a Self Signed SSL Certificate
- error when running monkey db upgrade HOT 4
- Google SSO Crashes on /api/1/auth/providers HOT 1
- botocore.exceptions.ClientError: An error occurred (AccessDenied) when calling the AssumeRole operation: Access denied HOT 11
- Hardcoded reference to Riot Games HOT 4
- No way to see what we are about to justify
- monkey db upgrade fails HOT 2
- ALB/ELB scans are not working HOT 4
- monkey db upgrade - issues HOT 5
- frequent null value in column "item_id" violates not-null constraint exception HOT 4
- monkey db upgrade is throwing error HOT 1
- monkey db upgrade issue is still there HOT 1
- Python 3 inconsistent list ordering causing frequent change detections
- pkg_resources.DistributionNotFound: The 'octodns' distribution was not found and is required by the application HOT 1
- How to Generate a change item email HOT 11
- Where to Submit a Security Vulnerability
- How to run SecMonkey locally HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from security_monkey.