Category Archives: django

How Can I customise Google Auth Error Message ("Couldn’t find your Google Account" or "Enter a valid email or phone number") [closed]

Posted on by

I don’t want to show Couldn’t find your Google Account or Enter a valid email or phone number. I want to show my own message like Login Failed or something else. Can you please let me know how can I do this.
For more information my applica… Continue reading How Can I customise Google Auth Error Message ("Couldn’t find your Google Account" or "Enter a valid email or phone number") [closed]→

Why famouse frameworks like django (And probably Rails) use both synchronizer pattern and Origin/Referer header checks for preventing CSRF attacks?

Posted on by

I see in the source code of Django that they do use both synchronizer token pattern and Origin/Referer header checks. I understand that if you are using the double-submit technique via cookie the following attack will work and you need to … Continue reading Why famouse frameworks like django (And probably Rails) use both synchronizer pattern and Origin/Referer header checks for preventing CSRF attacks?→

Which is more secure and better practice? Setting up a reverse proxy on backend with localhost or on a separate VM and route to other VMs/services?

Posted on by

I wanna know if it’s better in terms of security, availability and best practice to set up a nginx reverse proxy on my backend and use it with localhost or to set up a VM that handles everything for me.
I assume that using a separate VM wi… Continue reading Which is more secure and better practice? Setting up a reverse proxy on backend with localhost or on a separate VM and route to other VMs/services?→