fix(csp): skip restrictive CSP on Wagtail/Django admin paths #25
Reference in New Issue
Block a user
Delete Branch "fix/csp-wagtail-admin"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
The SecurityHeadersMiddleware applied a strict
style-srcpolicy to all responses, blocking inline styles that Wagtail admin relies on for layout (causing dead space/broken padding in the editor). Skips the custom CSP for/cms/and/django-admin/paths.