mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-07-07 21:35:15 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
django/docs/ref
History
Exact
Rob Hudson d63241ebc7 Fixed #15727 -- Added Content Security Policy (CSP) support. 
This initial work adds a pair of settings to configure specific CSP
directives for enforcing or reporting policy violations, a new
`django.middleware.csp.ContentSecurityPolicyMiddleware` to apply the
appropriate headers to responses, and a context processor to support CSP
nonces in templates for safely inlining assets.

Relevant documentation has been added for the 6.0 release notes,
security overview, a new how-to page, and a dedicated reference section.

Thanks to the multiple reviewers for their precise and valuable feedback.

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
2025-06-27 15:57:02 -03:00
..
class-based-views Fixed incorrect formatting for inline pluralized code references in docs. 2025-03-13 15:18:35 -03:00
contrib Fixed #36471 -- Added support for __coveredby GIS lookup and Collect, GeoHash, IsValid on MariaDB 12.0.1+. 2025-06-25 08:58:22 +02:00
files Removed versionadded/changed annotations for 5.1. 2025-01-15 22:28:37 +01:00
forms Fixed typo in docs/ref/forms/renderers.txt. 2025-05-23 11:19:59 +02:00
models Fixed #36425 -- Standardized integer fields descriptions. 2025-06-11 09:59:00 +02:00
templates Fixed #15727 -- Added Content Security Policy (CSP) support. 2025-06-27 15:57:02 -03:00
applications.txt Fixed #23790 -- Warned about renaming AppConfig.label in docs/ref/applications.txt. 2024-07-01 21:52:04 -03:00
checks.txt Fixed #15727 -- Added Content Security Policy (CSP) support. 2025-06-27 15:57:02 -03:00
clickjacking.txt Removed outdated note about limitations in Clickjacking protection. 2024-07-04 18:08:19 -03:00
csp.txt Fixed #15727 -- Added Content Security Policy (CSP) support. 2025-06-27 15:57:02 -03:00
csrf.txt Refs #35401 -- Linked the CsrfViewMiddleware docs to the csrf_protect() decorator. 2024-06-12 13:11:29 +02:00
databases.txt Fixed #36346 -- Removed outdated section about the threaded option in Oracle driver. 2025-04-27 14:16:50 +02:00
django-admin.txt Fixed #18296 -- Created missing custom target directory for startproject and startapp. 2025-04-27 14:41:27 +01:00
exceptions.txt Fixed #33579 -- Specialized exception raised on forced update failures. 2025-03-10 21:09:15 +01:00
index.txt Fixed #15727 -- Added Content Security Policy (CSP) support. 2025-06-27 15:57:02 -03:00
logging.txt Removed versionadded/changed annotations for 5.1. 2025-01-15 22:28:37 +01:00
middleware.txt Fixed #15727 -- Added Content Security Policy (CSP) support. 2025-06-27 15:57:02 -03:00
migration-operations.txt Fixed #35487 -- Removed CASCADE from RemoveField() on PostgreSQL. 2025-03-09 11:50:17 +01:00
paginator.txt Fixed #35452 -- Deprecated orphans being more than or equal to page_size in pagination. 2025-03-25 12:04:13 +01:00
request-response.txt Fixed #36447 -- Selected preferred media type based on quality. 2025-06-16 09:25:25 +02:00
schema-editor.txt Refs #27236 -- Removed Meta.index_together per deprecation timeline. 2023-09-18 22:12:40 +02:00
settings.txt Fixed #15727 -- Added Content Security Policy (CSP) support. 2025-06-27 15:57:02 -03:00
signals.txt Clarified pre_delete and post_delete's origin attributes. 2025-03-31 16:10:44 +02:00
template-response.txt Fixed #34140 -- Reformatted code blocks in docs with blacken-docs. 2023-03-01 13:03:56 +01:00
unicode.txt Fixed broken links and redirects in docs. 2024-03-06 08:50:21 +01:00
urlresolvers.txt Refs #25582 -- Doc'd query and fragment arguments for reverse_lazy(). 2025-03-12 16:41:44 +01:00
urls.txt Refs #35090 -- Removed support for django.urls.register_converter() overriding existing converters per deprecation timeline. 2025-01-15 22:28:37 +01:00
utils.txt Refs #34609 -- Removed support for calling format_html() without arguments per deprecation timeline. 2025-01-15 22:28:37 +01:00
validators.txt Removed versionadded/changed annotations for 5.1. 2025-01-15 22:28:37 +01:00
views.txt Fixed #34140 -- Reformatted code blocks in docs with blacken-docs. 2023-03-01 13:03:56 +01:00