  * **security.W007**: Your :setting:`SECURE_BROWSER_XSS_FILTER` setting is not
    set to ``True``, so your pages will not be served with an
    ``'X-XSS-Protection: 1; mode=block'`` header. You should consider enabling
    this header to activate the browser's XSS filtering and help prevent XSS
    attacks. *This check is removed in Django 3.0 as the ``X-XSS-Protection``
    header is no longer honored by modern browsers.*
  * **security.W008**: Your :setting:`SECURE_SSL_REDIRECT` setting is not set to
    ``True``. Unless your site should be available over both SSL and non-SSL
    connections, you may want to either set this setting to ``True`` or configure
    a load balancer or reverse-proxy server  to redirect all connections to HTTPS.
  * **security.W009**: Your :setting:`SECRET_KEY` has less than 50 characters or
 
</s> remove   '<alias>'. See also :ref:`mysql-sql-mode`.
 </s> add   ``<alias>``. See also :ref:`mysql-sql-mode`. </s> remove     messages about *`"Synchronous middleware ... adapted"*.
 </s> add     messages about *"Synchronous middleware ... adapted"*.
  attacks. *This check is removed in Django 3.0 as the* ``X-XSS-Protection``
  *header is no longer honored by modern browsers.*
  * **security.W007**: Your :setting:`SECURE_BROWSER_XSS_FILTER` setting is not
    set to ``True``, so your pages will not be served with an
    ``'X-XSS-Protection: 1; mode=block'`` header. You should consider enabling
    this header to activate the browser's XSS filtering and help prevent XSS
  attacks. *This check is removed in Django 3.0 as the* ``X-XSS-Protection``
  *header is no longer honored by modern browsers.*
  attacks. *This check is removed in Django 3.0 as the* ``X-XSS-Protection``
  *header is no longer honored by modern browsers.*
  * **security.W008**: Your :setting:`SECURE_SSL_REDIRECT` setting is not set to
    ``True``. Unless your site should be available over both SSL and non-SSL
    connections, you may want to either set this setting to ``True`` or configure
    a load balancer or reverse-proxy server  to redirect all connections to HTTPS.
  * **security.W009**: Your :setting:`SECRET_KEY` has less than 50 characters or
keep keep keep keep replace replace keep keep keep keep keep
 Fixed some formatting issues in docs. 
docs/ref/checks.txt