♻️(back) exclude /admin from CSP rules

We have to exclude the /admin prefix to allow loading static files when the django admin is used.
2025-06-30 14:46:01 +02:00
parent 388f71d9d0
commit 7e63e9e460
1 changed files with 1 additions and 1 deletions
--- a/src/backend/impress/settings.py
+++ b/src/backend/impress/settings.py
@@ -730,7 +730,7 @@ class Base(Configuration):
    # See https://content-security-policy.com/ for more information.
    CONTENT_SECURITY_POLICY = {
        "EXCLUDE_URL_PREFIXES": values.ListValue(
-            [],
+            ["/admin"],
            environ_name="CONTENT_SECURITY_POLICY_EXCLUDE_URL_PREFIXES",
            environ_prefix=None,
        ),