diff options
| author | Jelle van der Waa <jelle@vdwaa.nl> | 2019-01-29 16:42:54 +0100 |
|---|---|---|
| committer | Jelle van der Waa <jelle@archlinux.org> | 2019-02-18 16:42:51 +0100 |
| commit | 3525458926dfa47e6c7bcedb4304cc243e78d47a (patch) | |
| tree | 413b8c898c71fd6a07c797193768eaaf0071e80a /requirements.txt | |
| parent | 6b22bedd82ae69a54f15c2f5f64f9f3945e5fb43 (diff) | |
| download | archweb-3525458926dfa47e6c7bcedb4304cc243e78d47a.tar.gz archweb-3525458926dfa47e6c7bcedb4304cc243e78d47a.zip | |
Implement CSP for archweb
Add django-csp as dependency to be able to set CSP inside django's
settings and allow setting a CSP_NONCE for inline <script>'s in
templates. Since archweb heavily uses this pattern it's the best
compromise.
Diffstat (limited to 'requirements.txt')
| -rw-r--r-- | requirements.txt | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/requirements.txt b/requirements.txt index 515471ba..56f4bd0a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10,3 +10,4 @@ pytz>=2017.3 parse==1.11.1 django-jinja==2.4.1 sqlparse==0.2.4 +django-csp==3.5 |