Merge pull request #666 from vintasoftware/td/breach

Drop `django-debreach`

Author: pamella

README.md

@@ -60,7 +60,6 @@ Also, includes a Render.com `render.yaml` and a working Django `production.py` s
 -   `sentry-sdk` for error monitoring
 -   `python-decouple` for reading environment variables on settings files
 -   `celery` for background worker tasks
--   `django-debreach` for additional protection against BREACH attack
 -   `django-csp` for setting the draft security HTTP header Content-Security-Policy
 -   `django-permissions-policy` for setting the draft security HTTP header Permissions-Policy
 -   `django-defender` for blocking brute force attacks against login

backend/project_name/settings/base.py

@@ -44,7 +44,7 @@ def base_dir_join(*args):
 ]
 
 MIDDLEWARE = [
-    "debreach.middleware.RandomCommentMiddleware",
+    "django.middleware.gzip.GZipMiddleware",
     "django.middleware.security.SecurityMiddleware",
     "django_permissions_policy.PermissionsPolicyMiddleware",
     "whitenoise.middleware.WhiteNoiseMiddleware",

pyproject.toml

@@ -16,7 +16,6 @@ django-webpack-loader = "^3.1.0"
 django-js-reverse = "^0.10.2"
 django-import-export = "^3.3.5"
 djangorestframework = "^3.14.0"
-django-debreach = "^2.1.0"
 python-decouple = "^3.8"
 psycopg = "^3.1.19"
 brotlipy = "^0.7.0"