diff options
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/releases/6.1.txt | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/docs/releases/6.1.txt b/docs/releases/6.1.txt index 8f7172256e..0415856c95 100644 --- a/docs/releases/6.1.txt +++ b/docs/releases/6.1.txt @@ -282,6 +282,11 @@ CSP with ``CSP.NONCE`` in a CSP policy but ``django.template.context_processors.csp`` is not configured. +* CSP nonce attributes are now added on ``<script>``, ``<style>``, and + ``<link>`` elements in admin templates and all built-in templates when the + :func:`~django.template.context_processors.csp` context processor is + configured. See :ref:`csp-nonce-config` for setup instructions. + CSRF ~~~~ |