Skip to content

Conversation

@Jdsleppy
Copy link

@Jdsleppy Jdsleppy commented Feb 8, 2022

Note: this was tested against Python 3.9 and Django 2.2/3.2 by editing tox.ini and running tox. I'm not including those changes to not deviate from sdelements/django-security too much.

Martin Petkov and others added 22 commits July 29, 2020 13:03
Bumps [python-dateutil](https://github.com/dateutil/dateutil) from 2.8.0 to 2.8.1.
- [Release notes](https://github.com/dateutil/dateutil/releases)
- [Changelog](https://github.com/dateutil/dateutil/blob/master/NEWS)
- [Commits](dateutil/dateutil@2.8.0...2.8.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
…ateutil-2.8.1

Bump python-dateutil from 2.8.0 to 2.8.1
And adjust tox so all tests pass
…_both_csp_headers

Add support for both report-only and content-security CSP headers
- Change testenv:docs basepython version to 3.6
* Add support for new Content-Type

- Add acceptable content types
- New Content-Type should be "application/csp-report"
- https://w3c.github.io/webappsec-csp/
- Add support for 'application/csp-report' content type to csp report
  view
- add ReferrerPolicyMiddleware to support Referrer-Policy header setting
- add ReferrerPolicyMiddleware to README documentation
- add test coverage for ReferrerPolicyMiddleware
- make default same-origin, fix support for off setting, add test for off setting
- fix import ua_parser error and setup_tools dependencies so pip works
Add support for Referrer-Policy
@Jdsleppy Jdsleppy marked this pull request as ready for review February 8, 2022 19:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants