feat(django): preload django app

[sebglon]

Description

Pre-load Django app before wsgi start listening http queries #10137

Test results

Ideally you extend the test suite in tests/ and dojo/unittests to cover the changed in this PR. Alternatively, describe what you have and haven't tested.

Documentation

Please update any documentation when needed in the documentation folder)

Checklist

This checklist is for your information.

• [x] Make sure to rebase your PR against the very latest dev.
• [x] Features/Changes should be submitted against the dev.
• [x] Bugfixes should be submitted against the bugfix branch.
• [x] Give a meaningful name to your PR, as it may end up being used in the release notes.
• [x] Your code is flake8 compliant.
• [x] Your code is python 3.11 compliant.
• [x] If this is a new feature and not a bug fix, you've included the proper documentation in the docs at https://github.com/DefectDojo/django-DefectDojo/tree/dev/docs as part of this PR.
• [x] Model changes must include the necessary migrations in the dojo/db_migrations folder.
• [x] Add applicable tests to the unit tests.
• [ ] Add the proper label to categorize your PR.

[dryrunsecurity[bot]]

Hi there :wave:, @dryrunsecurity here, below is a summary of our analysis and findings.

DryRun Security	Status	Findings
Configured Codepaths Analyzer	:white_check_mark:	0 findings
Sensitive Files Analyzer	:white_check_mark:	0 findings
AppSec Analyzer	:white_check_mark:	0 findings
Authn/Authz Analyzer	:grey_exclamation:	1 finding
Secrets Analyzer	:white_check_mark:	0 findings

[!Note] :green_circle: Risk threshold not exceeded.

Change Summary (click to expand)

The following is a summary of changes in this pull request made by me, your security buddy :robot:. Note that this summary is auto-generated and not meant to be a definitive list of security issues but rather a helpful summary from a security perspective.

Summary:

The code change in the wsgi.py file is related to the Django web framework application and is focused on preloading the application code by preloading the URLs configuration. This change is primarily a performance optimization and does not introduce any obvious security vulnerabilities.

While the change itself does not raise any immediate security concerns, it's important to ensure that the overall application is properly secured. This includes reviewing the URLs configuration and the application's routes and views to ensure that user input is properly handled, appropriate access controls are in place, and best practices for secure web application development are followed. Additionally, it's crucial to monitor the application for any potential security issues that may arise due to changes in the codebase or external dependencies.

Files Changed:

• wsgi.py: This file is part of the Django web framework application and is responsible for the Web Server Gateway Interface (WSGI) configuration. The changes in this file preload the application code by preloading the URLs configuration, which can help improve the performance of the application. The changes include importing the necessary modules and adding a line to preload the URLs configuration.

Powered by DryRun Security

[github-actions[bot]]

This pull request has conflicts, please resolve those before we can evaluate the pull request.

[github-actions[bot]]

Conflicts have been resolved. A maintainer will review the pull request shortly.