studio/docs
Archived
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

♻️(back) exclude /admin from CSP rules

Browse Source 
We have to exclude the /admin prefix to allow loading static files when
the django admin is used.
This commit is contained in:
Manuel Raynaud
2025-06-30 14:46:01 +02:00
committed by GitHub
parent 388f71d9d0
commit 7e63e9e460
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/backend/impress/settings.py
View File

@@ -730,7 +730,7 @@ class Base(Configuration):
# See https://content-security-policy.com/ for more information. # See https://content-security-policy.com/ for more information.
CONTENT_SECURITY_POLICY = { CONTENT_SECURITY_POLICY = {
"EXCLUDE_URL_PREFIXES": values.ListValue( "EXCLUDE_URL_PREFIXES": values.ListValue(
[], ["/admin"],
environ_name="CONTENT_SECURITY_POLICY_EXCLUDE_URL_PREFIXES", environ_name="CONTENT_SECURITY_POLICY_EXCLUDE_URL_PREFIXES",
environ_prefix=None, environ_prefix=None,
), ),