A middleware to ensure only Sentry can access source maps.
When enabled, only requests from Sentry will be able to access source maps (any URL starting with STATIC_URL
and ending .map
).
For more information, see Secure Access to Source Maps
pip install django-sentry-secure-source-map
Then add sentry_secure_source_map.SentrySecureSourceMapMiddleware
to your MIDDLEWARE
in settings.py
. Ideally, it should be placed as high as possible, before tools like whitenoise
.
Next, you need to configure the token. Retrieve your project's "Security Token" from the settings page, and set it as SENTRY_SECURITY_TOKEN
.
SENTRY_SECURITY_TOKEN = "abcde12345"
If the token isn't set, the middleware does nothing.
"Enable JavaScript source fetching" must be enabled in Sentry.