chango.git/tests/check_framework/test_security.py, branch devmain

Fixed #37084 -- Added CSP nonce context processor system check.

2026-05-07T19:26:37Z

Fixed #36903 -- Fixed further NameErrors when inspecting functions with deferred annotations.

2026-02-10T21:51:55Z

Provide a wrapper for safe introspection of user functions on Python 3.14+. Follow-up to 601914722956cc41f1f2c53972d669ddee6ffc04.

Refs #36500 -- Rewrapped long docstrings and block comments via a script.

2025-07-23T23:17:55Z

Rewrapped long docstrings and block comments to 79 characters + newline using script from https://github.com/medmunds/autofix-w505.

Fixed #15727 -- Added Content Security Policy (CSP) support.

2025-06-27T18:57:02Z

This initial work adds a pair of settings to configure specific CSP directives for enforcing or reporting policy violations, a new `django.middleware.csp.ContentSecurityPolicyMiddleware` to apply the appropriate headers to responses, and a context processor to support CSP nonces in templates for safely inlining assets. Relevant documentation has been added for the 6.0 release notes, security overview, a new how-to page, and a dedicated reference section. Thanks to the multiple reviewers for their precise and valuable feedback. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Applied Black's 2024 stable style.

2024-01-26T11:45:07Z

https://github.com/psf/black/releases/tag/24.1.0

Refs #34695 -- Added tests for check for CSRF_FAILURE_VIEW signature with valid class-based view.

2023-07-11T08:46:34Z

Refs #33526 -- Made CSRF_COOKIE_SECURE/SESSION_COOKIE_SECURE/SESSION_COOKIE_HTTPONLY don't pass on truthy values.

2022-02-21T06:54:47Z

Refs #33476 -- Refactored code to strictly match 88 characters line length.

2022-02-07T19:37:05Z

Refs #33476 -- Reformatted code with Black.

2022-02-07T19:37:05Z

Fixed #30360 -- Added support for secret key rotation.

2022-02-01T10:12:24Z

Thanks Florian Apolloner for the implementation idea. Co-authored-by: Andreas Pelme Co-authored-by: Carlton Gibson Co-authored-by: Vuyisile Ndlovu