fix(csp): skip restrictive CSP on Wagtail/Django admin paths #25

Merged

mark merged 1 commits from fix/csp-wagtail-admin into main

2026-03-02 15:36:13 +00:00

Author	SHA1	Message	Date
Mark	43594777e0	fix(csp): skip restrictive CSP on Wagtail/Django admin paths All checks were successful CI / nightly-e2e (pull_request) Has been skipped Details CI / deploy (pull_request) Has been skipped Details CI / pr-e2e (pull_request) Successful in 1m11s Details CI / ci (pull_request) Successful in 1m22s Details The SecurityHeadersMiddleware applied a strict style-src policy to all responses, blocking inline styles that Wagtail admin relies on for layout. Skip the custom CSP for /cms/ and /django-admin/ paths. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-02 15:34:09 +00:00