Skip to main content
This is a pre-production deployment of Warehouse. Changes made here affect the production instance of PyPI (pypi.python.org).
Help us improve Python packaging - Donate today!

Django P3P makes it easier to set P3P HTTP headers to prevent session loss.

Project Description

About Django P3P

If your webpage uses sessions you willl lose your session in Internet Explorer when your page gets embedded into in iFrame. This problem can be solved by setting application specific P3P headers.

Django P3P is an application which makes it easier to set those specific headers for your Django application. You can use an editor like IBM’s P3P Policy Editor to configure your website policy to its needs.

Requirements

Django 1.8.x or greater, Python 2.7 or greater.

Installation

Install django-p3p with pip:

$ pip install django-p3p

Configuration

Configuring django-p3p

Add the following to your settings file:

  • Add p3p to INSTALLED_APPS
  • Add p3p.middleware.P3PMiddleware to MIDDLEWARE_CLASSES

URL Configuration

You need to include the p3p.urls urlpatterns in your root url configuration, for e.g.:

(r'^w3c/', include('p3p.urls', namespace='p3p')),
...
(r'^admin/', include(admin.site.urls)),

Overriding templates

You need to override at least 2 templates to configure your project specific HTTP headers and policy:

  • templates/p3p/headers.txt

Contains the actual HTTP headers which are sent to the browser. For e.g.: CP="NOI CURa ADMa DEVa TAIa CONa OUR DELa BUS IND PHY ONL UNI PUR COM NAV DEM STA"

  • templates/p3p/policy.p3p

Contains the policy as required for the application. You can generate one by using the IBM P3P Policy Editor.

Note

I left the initial templates mostly blank to prevent default usage. Mainly because every application has its own specific policies and it requires you to THINK about what policy fits your website.

Release History

Release History

This version
History Node

1.2.0

History Node

1.1.0

History Node

1.0.3

History Node

1.0.1

History Node

1.0.0

History Node

0.1.1b

Download Files

Download Files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

File Name & Checksum SHA256 Checksum Help Version File Type Upload Date
django-p3p-1.2.0.tar.gz (10.0 kB) Copy SHA256 Checksum SHA256 Source Mar 22, 2016

Supported By

WebFaction WebFaction Technical Writing Elastic Elastic Search Pingdom Pingdom Monitoring Dyn Dyn DNS Sentry Sentry Error Logging CloudAMQP CloudAMQP RabbitMQ Heroku Heroku PaaS Kabu Creative Kabu Creative UX & Design Fastly Fastly CDN DigiCert DigiCert EV Certificate Rackspace Rackspace Cloud Servers DreamHost DreamHost Log Hosting