django.git/docs/topics/security.txt, branch main

Refs CVE-2026-33034 -- Improved security documentation on handling large request bodies.

2026-04-07T14:33:38Z

Notably that the limit can be bypassed under ASGI.

Refs #36485 -- Rewrapped docs to 79 columns line length.

2025-08-25T13:51:10Z

Lines in the docs files were manually adjusted to conform to the 79 columns limit per line (plus newline), improving readability and consistency across the content.

Refs #36485 -- Removed unnecessary parentheses in :meth: and :func: roles in docs.

2025-08-25T13:51:10Z

Fixed spelling of "logged-in" when used as an adjective in docs.

2025-08-19T15:43:05Z

Fixed #15727 -- Added Content Security Policy (CSP) support.

2025-06-27T18:57:02Z

This initial work adds a pair of settings to configure specific CSP directives for enforcing or reporting policy violations, a new `django.middleware.csp.ContentSecurityPolicyMiddleware` to apply the appropriate headers to responses, and a context processor to support CSP nonces in templates for safely inlining assets. Relevant documentation has been added for the 6.0 release notes, security overview, a new how-to page, and a dedicated reference section. Thanks to the multiple reviewers for their precise and valuable feedback. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Added security reporting guidelines.

2025-02-24T07:51:08Z

Refs #34140 -- Applied rst code-block to non-Python examples.

2023-02-10T18:19:13Z

Thanks to J.V. Zammit, Paolo Melchiorre, and Mariusz Felisiak for reviews.

Updated OWASP Top 10 link in security topic.

2022-06-16T04:35:20Z

Removed versionadded/changed annotations for 4.0.

2022-05-17T12:22:06Z

Fixed #30360 -- Added support for secret key rotation.

2022-02-01T10:12:24Z

Thanks Florian Apolloner for the implementation idea. Co-authored-by: Andreas Pelme Co-authored-by: Carlton Gibson Co-authored-by: Vuyisile Ndlovu