django-csp

django-csp adds Content-Security-Policy headers to Django applications.

Version:3.7 Code:https://github.com/mozilla/django-csp License:BSD; see LICENSE file Issues:https://github.com/mozilla/django-csp/issues

Contents:

• Installing django-csp
• Configuring django-csp
  • Policy Settings
  • Other Settings
• Modifying the Policy with Decorators
  • @csp_exempt
  • @csp_update
  • @csp_replace
  • @csp
• Using the generated CSP nonce
  • Middleware
  • Context Processor
  • Django Template Tag/Jinja Extension
• Implementing Trusted Types with CSP
  • DOM Cross-site Scripting
  • Step 1: Enable Trusted Types and Report Only Mode
  • Step 2: Fixing Trusted Types Violations
  • Step 3: Enforce Trusted Types
• CSP Violation Reports
  • Throttling the number of reports
• Contributing
  • Style
  • Tests

Indices and tables

• Index
• Module Index
• Search Page