fix(csp): skip restrictive CSP on Wagtail/Django admin paths #25

Merged
mark merged 1 commits from fix/csp-wagtail-admin into main 2026-03-02 15:36:13 +00:00
Owner

The SecurityHeadersMiddleware applied a strict style-src policy to all responses, blocking inline styles that Wagtail admin relies on for layout (causing dead space/broken padding in the editor). Skips the custom CSP for /cms/ and /django-admin/ paths.

The SecurityHeadersMiddleware applied a strict `style-src` policy to all responses, blocking inline styles that Wagtail admin relies on for layout (causing dead space/broken padding in the editor). Skips the custom CSP for `/cms/` and `/django-admin/` paths.
mark added 1 commit 2026-03-02 15:34:18 +00:00
fix(csp): skip restrictive CSP on Wagtail/Django admin paths
All checks were successful
CI / nightly-e2e (pull_request) Has been skipped
CI / deploy (pull_request) Has been skipped
CI / pr-e2e (pull_request) Successful in 1m11s
CI / ci (pull_request) Successful in 1m22s
43594777e0
The SecurityHeadersMiddleware applied a strict style-src policy to all
responses, blocking inline styles that Wagtail admin relies on for
layout. Skip the custom CSP for /cms/ and /django-admin/ paths.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
mark merged commit a59d21cfcb into main 2026-03-02 15:36:13 +00:00
mark deleted branch fix/csp-wagtail-admin 2026-03-02 15:36:13 +00:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: nohype/main-site#25