Django-csp +

March 13, 2023 ยท View on GitHub

Adds Content-Security-Policy headers to Django applications.

Features

  • Adds CSP headers to the application in order make it more secure against Cross-site scripting attacks.

Integration to Hackassistant

  • Integrated all the Content delivery network domains needed to work. Add more if you need them to the settings.py with the library configuration from the documentation.

Future work

  • Add the nonce to the html scripts to make it more secure.