#33180: Debug 500 HTML broken with strict Content-Security-Policy (CSP)
--------------------------------------+------------------------------------
     Reporter:  Adam Johnson          |                    Owner:  Jordan
         Type:  Cleanup/optimization  |                   Status:  assigned
    Component:  Error reporting       |                  Version:  dev
     Severity:  Normal                |               Resolution:
     Keywords:                        |             Triage Stage:  Accepted
    Has patch:  0                     |      Needs documentation:  0
  Needs tests:  0                     |  Patch needs improvement:  0
Easy pickings:  0                     |                    UI/UX:  0
--------------------------------------+------------------------------------
Comment (by Rob Hudson):

 With the recent addition of CSP and the CSP view decorators, the debug
 views are now being decorated to not have a CSP applied. This only
 prevents the built-in CSP support from adding a header, not removing a
 header that already exists by other means.
-- 
Ticket URL: <https://code.djangoproject.com/ticket/33180#comment:11>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To view this discussion visit 
https://groups.google.com/d/msgid/django-updates/01070199018c80fb-67770a45-ab1c-48c5-a5b9-ed4645d9a478-000000%40eu-central-1.amazonses.com.

Reply via email to