Skip to content

Django CSP nonce not included #187

@TimdeBeer1

Description

@TimdeBeer1

Product versie / Product version

0.13.0

Omschrijf het probleem / Describe the bug

While overriding the openlayers.html template in Open Zaak to add the nonce to the script - https://django-csp.readthedocs.io/en/latest/nonce.html

The CSP nonce is not included in the CSP script-src header, even though it is configured in OAF’s base settings.

Info - open-zaak/open-zaak#2175 (comment)

Stappen om te reproduceren / Steps to reproduce

No response

Verwacht gedrag / Expected behavior

No response

Metadata

Metadata

Assignees

Labels

blockedIssue is blocked. There should be a comment that explains why.bugSomething isn't workingowner: maykin

Type

Projects

Status

Implemented

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions