django-sentry-secure-source-map

A middleware to ensure only Sentry can access source maps.

When enabled, only requests from Sentry will be able to access source maps (any URL starting with STATIC_URL and ending .map).

For more information, see Secure Access to Source Maps

Installation

pip install django-sentry-secure-source-map

Then add sentry_secure_source_map.SentrySecureSourceMapMiddleware to your MIDDLEWARE in settings.py. Ideally, it should be placed as high as possible, before tools like whitenoise.

Next, you need to configure the token. Retrieve your project's "Security Token" from the settings page, and set it as SENTRY_SECURITY_TOKEN.

SENTRY_SECURITY_TOKEN = "abcde12345"

If the token isn't set, the middleware does nothing.

"Enable JavaScript source fetching" must be enabled in Sentry.