Rob Hudson d63241ebc7 Fixed #15727 -- Added Content Security Policy (CSP) support. ...

This initial work adds a pair of settings to configure specific CSP
directives for enforcing or reporting policy violations, a new
`django.middleware.csp.ContentSecurityPolicyMiddleware` to apply the
appropriate headers to responses, and a context processor to support CSP
nonces in templates for safely inlining assets.

Relevant documentation has been added for the 6.0 release notes,
security overview, a new how-to page, and a dedicated reference section.

Thanks to the multiple reviewers for their precise and valuable feedback.

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

2025-06-27 15:57:02 -03:00

..

auth

Removed versionadded/changed annotations for 5.1.

2025-01-15 22:28:37 +01:00

class-based-views

Fixed #36311 -- Unified spelling of "hardcode" and its variants in docs.

2025-04-15 14:48:55 -03:00

db

Corrected jsonfield fieldlookup references.

2025-06-13 09:50:56 +02:00

forms

Fixed incorrect formatting for inline pluralized code references in docs.

2025-03-13 15:18:35 -03:00

http

Fixed #36311 -- Unified spelling of "hardcode" and its variants in docs.

2025-04-15 14:48:55 -03:00

i18n

Fixed #35993 -- Documented gettext f-string support limitations.

2025-04-15 10:02:25 +02:00

testing

Fixed #36311 -- Unified spelling of "hardcode" and its variants in docs.

2025-04-15 14:48:55 -03:00

async.txt

Fixed #33497 -- Doc'd that persistent DB connections should be disabled in ASGI and async modes.

2025-03-18 21:26:57 -03:00

cache.txt

Fixed #36311 -- Unified spelling of "hardcode" and its variants in docs.

2025-04-15 14:48:55 -03:00

checks.txt

Fixed #35358, Refs #35234 -- Renamed _check() methods to check() for constraints.

2025-02-19 20:27:30 +01:00

composite-primary-key.txt

Refs #373 -- Doc'd that on_delete is ignored for ForeignObject.

2025-06-10 09:44:40 +02:00

conditional-view-processing.txt

Applied Black's 2024 stable style.

2024-01-26 12:45:07 +01:00

email.txt

Refs #36005 -- Bumped minimum supported versions of 3rd-party packages.

2025-01-28 08:02:13 +01:00

external-packages.txt

Used extlinks for PyPI links.

2023-04-17 06:55:32 +02:00

files.txt

Fixed #36269 -- Documented how to test callable storage in FileField.

2025-04-15 10:05:59 +02:00

index.txt

Fixed #373 -- Added CompositePrimaryKey.

2024-11-29 11:23:04 +01:00

install.txt

Relocated database setup details to install docs to simplify tutorial 2.

2024-07-04 15:30:52 -03:00

logging.txt

Fixed #34140 -- Reformatted code blocks in docs with blacken-docs.

2023-03-01 13:03:56 +01:00

migrations.txt

Made minor grammar and punctuation fixes in docs/topics/migrations.txt.

2025-06-11 12:52:26 -03:00

pagination.txt

Fixed #34140 -- Reformatted code blocks in docs with blacken-docs.

2023-03-01 13:03:56 +01:00

performance.txt

Fixed incorrect formatting for inline pluralized code references in docs.

2025-03-13 15:18:35 -03:00

security.txt

Fixed #15727 -- Added Content Security Policy (CSP) support.

2025-06-27 15:57:02 -03:00

serialization.txt

Fixed #29522 -- Refactored the Deserializer functions to classes.

2024-09-17 11:00:49 +02:00

settings.txt

Updated "Dive Into Python" links.

2024-01-20 19:43:55 +01:00

signals.txt

Fixed typo in docs/topics/signals.txt.

2025-03-23 20:02:42 +01:00

signing.txt

Updated sign() outputs in Cryptographic signing docs.

2024-09-25 19:52:18 +02:00

templates.txt

Added meaningful titles to ..admonition:: directives.

2023-04-21 12:03:59 +02:00