mozilla/django-csp

Issues

• reportMissingImports

  #240 opened 14 days ago by omidshojaee
  0

• Add support for reporting endpoints headers

  #235 opened 2 months ago by robhudson
  0

• When REPORT_PERCENTAGE is set to 100%, the `report-uri` directive is not always included in the CSP header

  #231 opened 2 months ago by robhudson
  2

• [Beta] Report percentage cannot be smaller than 1%

  #230 opened 2 months ago by janbrasna
  2

• Deprecated Features

  #197 opened a year ago by some1ataplace
  5

• interested in adding typing (mypy) support?

  #198 opened 2 months ago by asottile-sentry
  4

• docs: Add that `REPORT_PERCENTAGE` requires the rate-limiting middleware in the configuration docs

  #232 opened 2 months ago by robhudson
  0

• docs: Differentiate between "None" and `NONE` in directives

  #229 opened 2 months ago by janbrasna
  0

• Support clearing/unsetting directives via decorator

  #201 opened 8 months ago by tim-schilling
  7

• Don't include nonces in default-src when CSP_INCLUDE_NONCE_IN is unset / an empty list

  #191 opened 3 months ago by juspence
  3

• Possible to override CSP_INCLUDE_NONCE_IN per-view with a decorator?

  #139 opened 3 months ago by fallen
  7

• Change import path to `django_csp` - breaking change

  #221 opened 3 months ago by robhudson
  1

• State of project

  #186 opened 3 months ago by benzkji
  9

• Decorators depending on request method types

  #169 opened 3 years ago by erdimeola
  3

• Allow direct editing of build policy output

  #192 opened 2 years ago by dgabrahams
  1

• Add an example of a "strict" security policy to the configuration docs

  #156 opened 4 years ago by meggles711
  6

• Unrecognized Content Security Policy directive 'worker-src' in Safari Browser

  #187 opened 4 months ago by sandeepks230
  2

• Support different sets of rules for paths like /admin

  #203 opened 8 months ago by robvdl
  8

• Docs are out of date on RTD

  #143 opened 7 months ago by marksweb
  17

• New release?

  #184 opened 6 months ago by bobwhitelock
  11

• Move project to pyproject.toml

  #209 opened 6 months ago by stevejalim
  1

• Create csp.extensions.NoncedStyle extension

  #212 opened 7 months ago by GergelyKalmar
  1

• Building the wheel doesn't work

  #188 opened 7 months ago by papoteur-mga
  4

• Documentation for context processor

  #194 opened 7 months ago by sagejason
  5

• `CSP_INCLUDE_NONCE_IN` not working?

  #182 opened 2 years ago by javulticat
  4

• Documentation needs to be updated to mention INSTALLED_APPS

  #168 opened 3 years ago by Flimm
  4

• Backwards compatible method of adding 'strict-dynamic' as suffix

  #190 opened 2 years ago by dgabrahams
  1

• Nonce blank when template rendered

  #122 opened 2 years ago by ceiphr
  10

• 3.7 and 3.8 "pep8: FutureWarning: Possible nested set at position 1"

  #137 opened 3 years ago by g-k
  4

• Modify CSP based on database?

  #181 opened 3 years ago by CodeMonk
  1

• nonce, request.csp_nonce and {% script %} all fail to render a nonce

  #167 opened 3 years ago by Flimm
  8

• Python 3.6 "DeprecationWarning: 'async' and 'await' will become reserved keywords in Python 3.7"

  #136 opened 3 years ago by g-k
  6

• broken admin filters

  #173 opened 3 years ago by rmmineiro
  3

• Travis CI free usage ends Dec 3; mozilla repos should switch to other CI platforms

  #164 opened 4 years ago by hwine
  0

• Middleware order

  #162 opened 4 years ago by Jesus805
  1

• Sitemap.xml and Django error pages

  #147 opened 4 years ago by 9mido
  3

• More filtering in middlewares

  #126 opened 4 years ago by jonprindiville
  4

• Nonce Value Not 128 bits

  #148 opened 4 years ago by 9mido
  7

• Adding Support for Trusted Types

  #157 opened 4 years ago by meggles711
  2

• Vulnerability How To Trick CSP

  #159 opened 4 years ago by 9mido
  1

• Content Security Policy check failure. Only CSP_INCLUDE_NONCE_IN works well

  #151 opened 4 years ago by nidamanx
  5

• Maintaining config from Django Admin

  #153 opened 4 years ago by jbothma
  2

• csp_update not working on class based view

  #150 opened 4 years ago by grm
  1

• ModuleNotFoundError: No module named 'django.utils.six' with django 3.0

  #149 opened 4 years ago by GitRon
  1

• Upstream changes in django core

  #135 opened 5 years ago by g-k
  2

• Context processors' variable name

  #125 opened 4 years ago by mpboom
  0

• Add support for Django 3.0

  #129 opened 5 years ago by archatas
  9

• RemovedInDjango40Warning: force_text() is deprecated in favor of force_str().

  #132 opened 5 years ago by g-k
  0

• Auto sha256

  #127 opened 5 years ago by MHM5000
  6

• Documentation Request: CSP_INCLUDE_NONCE_IN

  #123 opened 5 years ago by darakian
  2