➕(back) install and configure django csp (#1085)

We want to protect all requests from django with content security policy header. We use the djang-csp library and configure it with default values. Fixes #1000
2025-06-30 10:42:48 +02:00
parent 4ae757ce93
commit dfdfe83db5
6 changed files with 196 additions and 107 deletions
--- a/src/backend/pyproject.toml
+++ b/src/backend/pyproject.toml
@@ -32,6 +32,7 @@ dependencies = [
    "django-configurations==2.5.1",
    "django-cors-headers==4.7.0",
    "django-countries==7.6.1",
+    "django-csp==4.0",
    "django-filter==25.1",
    "django-lasuite[all]==0.0.9",
    "django-parler==2.3",