django http://cgit.adnoto.dev/chango.git/atom?h=devmain 2026-05-20T20:17:41Z 2026-05-20T20:17:41Z Sarah Boyce 42296566+sarahboyce@users.noreply.github.com 2026-05-13T15:54:37Z urn:sha1:c17e494866024304da7f49a8ac3a43ac53bec93e 2026-05-06T23:43:37Z Natalia 124304+nessita@users.noreply.github.com 2026-03-26T01:53:58Z urn:sha1:5686ce41958b21f0ae5bfa290e8d4420a6349c1b New default tag `{% csp_nonce_attr %}` was added for explicit CSP nonce inclusion into `<script>` and `<link>` elements. `{% csp_nonce_attr %}` renders `nonce="<value>"` when `csp_nonce` is present in the template context, and renders nothing otherwise. `{% csp_nonce_attr media %}` renders a `Media` object's assets with the nonce attr applied to each tag. Thanks Jacob Walls for the accurate and spot on review comments. Co-authored-by: Johannes Maron <johannes@maron.family> 2026-02-25T16:08:52Z Natalia 124304+nessita@users.noreply.github.com 2026-02-25T13:37:38Z urn:sha1:bbc6818bc12f14c1764a7eb68556018195f56b59 2025-08-28T06:52:43Z SaJH wogur981208@gmail.com 2025-08-25T15:50:53Z urn:sha1:3c0c54351b58e9386375d2bd7a8c60dadc4bb6e8 Signed-off-by: SaJH <wogur981208@gmail.com> 2025-08-25T13:51:10Z David Smith smithdc@gmail.com 2025-07-25T09:24:17Z urn:sha1:f81e6e3a53ee36e3f730a71aa55a5744982dd016 Lines in the docs files were manually adjusted to conform to the 79 columns limit per line (plus newline), improving readability and consistency across the content. 2025-08-25T13:51:10Z Natalia 124304+nessita@users.noreply.github.com 2025-08-22T15:36:48Z urn:sha1:4286a23df64f6ce3b9b6ed097f4d1aac7d9e0de4 2025-08-15T00:53:14Z farhan farhanalirazaazeemi@gmail.com 2025-06-03T05:32:34Z urn:sha1:5e06b970956af4854e970e74990cb971ba31c96b Introduced `{% partialdef %}` and `{% partial %}` template tags to define and render reusable named fragments within a template file. Partials can also be accessed using the `template_name#partial_name` syntax via `get_template()`, `render()`, `{% include %}`, and other template-loading tools. Adjusted `get_template()` behavior to support partial resolution, with appropriate error handling for invalid names and edge cases. Introduced `PartialTemplate` to encapsulate partial rendering behavior. Includes tests and internal refactors to support partial context binding, exception reporting, and tag validation. Co-authored-by: Carlton Gibson <carlton@noumenal.es> Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> Co-authored-by: Nick Pope <nick@nickpope.me.uk> 2025-06-27T18:57:02Z Rob Hudson rob@cogit8.org 2025-05-03T17:01:58Z urn:sha1:d63241ebc7067fdebbaf704989b34fcd8f26bbe9 This initial work adds a pair of settings to configure specific CSP directives for enforcing or reporting policy violations, a new `django.middleware.csp.ContentSecurityPolicyMiddleware` to apply the appropriate headers to responses, and a context processor to support CSP nonces in templates for safely inlining assets. Relevant documentation has been added for the 6.0 release notes, security overview, a new how-to page, and a dedicated reference section. Thanks to the multiple reviewers for their precise and valuable feedback. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> 2025-04-15T17:48:55Z Ahmed Nassar a.moh.nassar00@gmail.com 2025-04-14T17:12:56Z urn:sha1:be402891cd78f484b7f67e486924975523516ced Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> 2025-03-25T15:23:41Z Giannis Terzopoulos terzo.giannis@gmail.com 2025-03-19T11:21:41Z urn:sha1:a39c28706aa7a8c3effd0980ae6d59ae67299d85 Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>