| Age | Commit message (Collapse) | Author |
|
This initial work adds a pair of settings to configure specific CSP
directives for enforcing or reporting policy violations, a new
`django.middleware.csp.ContentSecurityPolicyMiddleware` to apply the
appropriate headers to responses, and a context processor to support CSP
nonces in templates for safely inlining assets.
Relevant documentation has been added for the 6.0 release notes,
security overview, a new how-to page, and a dedicated reference section.
Thanks to the multiple reviewers for their precise and valuable feedback.
Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
|
|
https://github.com/psf/black/releases/tag/24.1.0
|
|
|
|
favor of databases.
|
|
|
|
Fixed a failure in the context processors tests when running in
reverse on MySQL due to an extra query after refs #27683.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
dictionary and context_instance and superseded by context.
Refactored tests that relied context_instance with more modern idioms.
|
|
|
|
This change preserves backwards-compatibility for a very common misuse
of render_to_response which even occurred in the official documentation.
It fixes that misuse wherever it happened in the code base and docs.
Context.__init__ is documented as accepting a dict and nothing else.
Since Context is dict-like, Context(Context({})) could work to some
extent. However, things get complicated with RequestContext and that
gets in the way of refactoring the template engine. This is the real
rationale for this change.
|
|
Fixed #23364. Thanks Markush2010 for the report.
|
|
|
|
Thanks Carl Meyer for the suggestion and Alex Gaynor and Carl for reviews.
|
|
Added comments in the three empty models.py files that are still needed.
Adjusted the test runner to add applications corresponding to test
labels to INSTALLED_APPS even when they don't have a models module.
|
|
|
|
* Removed trailing whitespace.
* Added newline to EOF if missing.
* Removed blank lines at EOF.
* Removed some stray tabs.
|
|
Should be unneeded with Python 2.7 and up.
Added some unicode_literals along the way.
|
|
|
|
|