mirror of
				https://github.com/django/django.git
				synced 2025-10-31 01:25:32 +00:00 
			
		
		
		
	This initial work adds a pair of settings to configure specific CSP directives for enforcing or reporting policy violations, a new `django.middleware.csp.ContentSecurityPolicyMiddleware` to apply the appropriate headers to responses, and a context processor to support CSP nonces in templates for safely inlining assets. Relevant documentation has been added for the 6.0 release notes, security overview, a new how-to page, and a dedicated reference section. Thanks to the multiple reviewers for their precise and valuable feedback. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
		
			
				
	
	
		
			73 lines
		
	
	
		
			1.2 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
			
		
		
	
	
			73 lines
		
	
	
		
			1.2 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
| =============
 | |
| How-to guides
 | |
| =============
 | |
| 
 | |
| Practical guides covering common tasks and problems.
 | |
| 
 | |
| Models, data and databases
 | |
| ==========================
 | |
| 
 | |
| .. toctree::
 | |
|    :maxdepth: 1
 | |
| 
 | |
|    initial-data
 | |
|    legacy-databases
 | |
|    custom-model-fields
 | |
|    writing-migrations
 | |
|    custom-lookups
 | |
| 
 | |
| Templates and output
 | |
| ====================
 | |
| 
 | |
| .. toctree::
 | |
|    :maxdepth: 1
 | |
| 
 | |
|    outputting-csv
 | |
|    outputting-pdf
 | |
|    overriding-templates
 | |
|    custom-template-backend
 | |
|    custom-template-tags
 | |
| 
 | |
| Project configuration and management
 | |
| ====================================
 | |
| 
 | |
| .. toctree::
 | |
|    :maxdepth: 1
 | |
| 
 | |
|    static-files/index
 | |
|    logging
 | |
|    error-reporting
 | |
|    delete-app
 | |
| 
 | |
| Installing, deploying and upgrading
 | |
| ===================================
 | |
| 
 | |
| .. toctree::
 | |
|    :maxdepth: 1
 | |
| 
 | |
|    upgrade-version
 | |
|    windows
 | |
|    deployment/index
 | |
|    static-files/deployment
 | |
| 
 | |
| Other guides
 | |
| ============
 | |
| 
 | |
| .. toctree::
 | |
|    :maxdepth: 1
 | |
| 
 | |
|    auth-remote-user
 | |
|    csp
 | |
|    csrf
 | |
|    custom-file-storage
 | |
|    custom-management-commands
 | |
|    custom-shell
 | |
| 
 | |
| .. seealso::
 | |
| 
 | |
|     The `Django community aggregator`_, where we aggregate content from the
 | |
|     global Django community. Many writers in the aggregator write this sort of
 | |
|     how-to material.
 | |
| 
 | |
|     .. _django community aggregator: https://www.djangoproject.com/community/
 |