Protecting static files in your web app

... in production

https://github.com/dAnjou/xsendfile-example

Transcript

1. … in production Protecting static files in your web app
2. X-Sendfile HTTP header
3. GET /video.ogv video.ogv web server web app check permissions + set header check header + serve file
4. from django.http import HttpResponse from django.utils.encoding import smart_str def sendfile(request, filename, **kwargs): # check requesting user’s permissions response = HttpResponse() response['X-Sendfile'] = smart_str(unicode(filename)) return response django-sendfile/sendfile/backends/xsendfile.py
5. <VirtualHost *:80> XSendFile On # ... </VirtualHost> /etc/apache2/sites-available/example.de
6. Apache2: X-Sendfile nginx: X-Accel-Redirect Lighttpd: X-LIGHTTPD-send-file
7. github.com/dAnjou/xsendfile-example mail@danjou.de