django/tests/middleware
Rob Hudson d63241ebc7 Fixed #15727 -- Added Content Security Policy (CSP) support.
This initial work adds a pair of settings to configure specific CSP
directives for enforcing or reporting policy violations, a new
`django.middleware.csp.ContentSecurityPolicyMiddleware` to apply the
appropriate headers to responses, and a context processor to support CSP
nonces in templates for safely inlining assets.

Relevant documentation has been added for the 6.0 release notes,
security overview, a new how-to page, and a dedicated reference section.

Thanks to the multiple reviewers for their precise and valuable feedback.

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
2025-06-27 15:57:02 -03:00
..
__init__.py Merged regressiontests and modeltests into the test root. 2013-02-26 14:36:57 +01:00
cond_get_urls.py Refs #33476 -- Reformatted code with Black. 2022-02-07 20:37:05 +01:00
extra_urls.py Refs #33476 -- Reformatted code with Black. 2022-02-07 20:37:05 +01:00
test_csp.py Fixed #15727 -- Added Content Security Policy (CSP) support. 2025-06-27 15:57:02 -03:00
test_security.py Applied Black's 2024 stable style. 2024-01-26 12:45:07 +01:00
tests.py Fixed #36138 -- Changed ADMINS and MANAGERS settings to lists of strings. 2025-03-21 10:17:57 +01:00
urls.py Fixed #15727 -- Added Content Security Policy (CSP) support. 2025-06-27 15:57:02 -03:00
views.py Fixed #15727 -- Added Content Security Policy (CSP) support. 2025-06-27 15:57:02 -03:00