diff --git a/dojo/settings/settings.dist.py b/dojo/settings/settings.dist.py index c39e3c44c0..b89371af23 100644 --- a/dojo/settings/settings.dist.py +++ b/dojo/settings/settings.dist.py @@ -40,6 +40,7 @@ DD_SECURE_CONTENT_TYPE_NOSNIFF=(bool, True), DD_CSRF_COOKIE_SAMESITE=(str, 'Lax'), DD_SESSION_COOKIE_SAMESITE=(str, 'Lax'), + DD_APPEND_SLASH=(bool, False), DD_TIME_ZONE=(str, 'UTC'), DD_LANG=(str, 'en-us'), DD_TEAM_NAME=(str, 'Security Team'), @@ -670,6 +671,9 @@ def generate_url(scheme, double_slashes, user, password, host, port, path, param SESSION_COOKIE_SECURE = env('DD_SESSION_COOKIE_SECURE') SESSION_COOKIE_SAMESITE = env('DD_SESSION_COOKIE_SAMESITE') +# Override default Django behavior for incorrect URLs +APPEND_SLASH = env('DD_APPEND_SLASH') + # Whether to use a secure cookie for the CSRF cookie. CSRF_COOKIE_SECURE = env('DD_CSRF_COOKIE_SECURE') CSRF_COOKIE_SAMESITE = env('DD_CSRF_COOKIE_SAMESITE')