⬆️ update open-api-framework

maykinmedia · Aug 27, 2024 · 34760dd · 34760dd
1 parent 29a84b0
commit 34760dd
Show file tree

Hide file tree

Showing 4 changed files with 29 additions and 3 deletions.
diff --git a/docs/installation/config.rst b/docs/installation/config.rst
@@ -49,6 +49,18 @@ Elastic APM
 * ``ELASTIC_APM_TRANSACTION_SAMPLE_RATE``: By default, the agent will sample every transaction (e.g. request to your service). To reduce overhead and storage requirements, set the sample rate to a value between 0.0 and 1.0. Defaults to: ``0.1``.
 
 
+Content Security Policy
+-----------------------
+
+* ``CSP_EXTRA_DEFAULT_SRC``: Extra default source URLs for CSP other than ``self``. Used for ``img-src``, ``style-src`` and ``script-src``. Defaults to: ``[]``.
+* ``CSP_REPORT_URI``: URI of the``report-uri`` directive. Defaults to: ``None``.
+* ``CSP_REPORT_PERCENTAGE``: Percentage of requests that get the ``report-uri`` directive. Defaults to: ``0``.
+* ``CSP_EXTRA_FORM_ACTION``: Add additional ``form-action`` source to the default . Defaults to: ``[]``.
+* ``CSP_FORM_ACTION``: Override the default ``form-action`` source. Defaults to: ``[&#x27;&quot;\&#x27;self\&#x27;&quot;&#x27;]``.
+* ``CSP_EXTRA_IMG_SRC``: Extra ``img-src`` sources for CSP other than ``CSP_DEFAULT_SRC``. Defaults to: ``[]``.
+* ``CSP_OBJECT_SRC``: ``object-src`` urls. Defaults to: ``[&#x27;&quot;\&#x27;none\&#x27;&quot;&#x27;]``.
+
+
 Optional
 --------
 

diff --git a/requirements/base.txt b/requirements/base.txt
@@ -78,6 +78,7 @@ django==4.2.15
     #   django-appconf
     #   django-axes
     #   django-cors-headers
+    #   django-csp
     #   django-filter
     #   django-formtools
     #   django-import-export
@@ -114,6 +115,8 @@ django-axes==6.5.1
     # via open-api-framework
 django-cors-headers==4.4.0
     # via open-api-framework
+django-csp==3.8
+    # via open-api-framework
 django-filter==24.2
     # via
     #   commonground-api-common
@@ -235,7 +238,7 @@ mozilla-django-oidc-db==0.19.0
     # via open-api-framework
 notifications-api-common==0.2.2
     # via commonground-api-common
-open-api-framework==0.7.1
+open-api-framework==0.8.0
     # via -r requirements/base.in
 openpyxl==3.1.5
     # via tablib

diff --git a/requirements/ci.txt b/requirements/ci.txt
@@ -126,6 +126,7 @@ django==4.2.15
     #   django-appconf
     #   django-axes
     #   django-cors-headers
+    #   django-csp
     #   django-filter
     #   django-formtools
     #   django-import-export
@@ -170,6 +171,10 @@ django-cors-headers==4.4.0
     # via
     #   -r requirements/base.txt
     #   open-api-framework
+django-csp==3.8
+    # via
+    #   -r requirements/base.txt
+    #   open-api-framework
 django-filter==24.2
     # via
     #   -r requirements/base.txt
@@ -401,7 +406,7 @@ notifications-api-common==0.2.2
     # via
     #   -r requirements/base.txt
     #   commonground-api-common
-open-api-framework==0.7.1
+open-api-framework==0.8.0
     # via -r requirements/base.txt
 openpyxl==3.1.5
     # via

diff --git a/requirements/dev.txt b/requirements/dev.txt
@@ -170,6 +170,7 @@ django==4.2.15
     #   django-appconf
     #   django-axes
     #   django-cors-headers
+    #   django-csp
     #   django-debug-toolbar
     #   django-extensions
     #   django-filter
@@ -220,6 +221,11 @@ django-cors-headers==4.4.0
     #   -c requirements/ci.txt
     #   -r requirements/ci.txt
     #   open-api-framework
+django-csp==3.8
+    # via
+    #   -c requirements/ci.txt
+    #   -r requirements/ci.txt
+    #   open-api-framework
 django-debug-toolbar==4.4.6
     # via -r requirements/dev.in
 django-extensions==3.2.3
@@ -542,7 +548,7 @@ notifications-api-common==0.2.2
     #   -c requirements/ci.txt
     #   -r requirements/ci.txt
     #   commonground-api-common
-open-api-framework==0.7.1
+open-api-framework==0.8.0
     # via
     #   -c requirements/ci.txt
     #   -r requirements/ci.txt