mozilla/django-csp

Issues

• More fine grained CSPs

  #120 opened 5 years ago
  0

• Adding nonce to script tags rendered by Django Form Assets (Media class)

  #119 opened 5 years ago
  8

• CODE_OF_CONDUCT.md file missing

  #115 opened 6 years ago
  0

• Wiki changes

  #111 opened 6 years ago
  1

• Make jinja2 optional and/or test-only

  #109 opened 6 years ago
  0

• `script-src-attr`, `script-src-elem`, `style-src-attr`, `style-src-elem` directives

  #108 opened 6 years ago
  6

• [Solved] Heroku Deployment No Module error

  #106 opened 6 years ago
  1

• How do we use csp_update in a class based view

  #105 opened 5 years ago
  2

• example of iframe

  #103 opened 6 years ago
  2

• No module found after install

  #101 opened 6 years ago
  2

• Code coverage through coveralls?

  #96 opened 5 years ago
  2

• Allow certain URLs to be exempted from 'strict-dynamic'

  #95 opened 6 years ago
  4

• Create a new release

  #93 opened 7 years ago
  5

• Allow url when added to a model in the admin.

  #86 opened 6 years ago
  1

• support disown-opener directive

  #83 opened 6 years ago
  1

• Add deprecation notice for child-src

  #80 opened 8 years ago
  0

• support report-to header and directive

  #79 opened 6 years ago
  6

• Refused to load script - data:application/javascript;base64,...

  #73 opened 8 years ago
  7

• Feature request: allow use of '{host}' in directives, replaced by `request.get_host()`

  #72 opened 8 years ago
  7

• Add support for Django 1.10

  #70 opened 8 years ago
  0

• Decorators cannot be chained

  #69 opened 7 years ago
  3

• Setting a lazy-evaluated string to CSP_REPORT_URI no longer works

  #67 opened 8 years ago
  0

• Pip install not updated

  #66 opened 8 years ago
  2

• Remove last mentions of report processing

  #64 opened 8 years ago
  0

• Versioned docs for the tagged packages versions don't appear to be available on RTD

  #63 opened 5 years ago
  2

• Docs version is not in-sync with the package version

  #62 opened 6 years ago
  3

• Add support for manifest-src (CSP 3)

  #60 opened 8 years ago
  0

• Add support for plugin-types

  #59 opened 8 years ago
  0

• Add support for upgrade-insecure-requests

  #58 opened 8 years ago
  0

• Add support for referrer policy

  #57 opened 8 years ago
  2

• Add deprecation notice for frame-src

  #56 opened 8 years ago
  1

• Add suport for CSP 2 source-list directives

  #55 opened 9 years ago
  0

• Decorators modify config

  #53 opened 8 years ago
  1

• [tracker] Add support for CSP 2.0

  #50 opened 8 years ago
  1

• nonce support

  #48 opened 6 years ago
  26

• Fallback for CSP_EXCLUDE_URL_PREFIXES is hardcoded

  #44 opened 8 years ago
  3

• CSP configuration decorator for views do not have the 'report-uri' directive.

  #42 opened 11 years ago
  2

• CSP_*_SRC as tuples do not play well with string decorators

  #40 opened 11 years ago
  0

• CSP 1.1 directives

  #39 opened 8 years ago
  1

• support using with urlmiddleware or similar

  #38 opened 11 years ago
  7

• Emit warnings on misspelled keywords

  #37 opened 11 years ago
  1

• Allow enforced CSP and Report-Only at the same time

  #36 opened 5 months ago
  42

• Include X-WebKit-CSP in response for Safari

  #33 opened 11 years ago
  3

• Drop report processing

  #30 opened 11 years ago
  1

• Make an exception for Django debug view

  #27 opened 11 years ago
  2

• Missing report fields

  #24 opened 12 years ago
  1

• Trailing slash in urls.py

  #23 opened 12 years ago
  0

• Reporting should use the django logging framework

  #18 opened 11 years ago
  2

• Signal on report creation

  #14 opened 12 years ago
  1

• Drop POLICY_URI setting and view

  #13 opened 12 years ago
  0