hypy13 / hypy13/django-daisy

Inline JavaScript Breaks with Strict CSP

Open
#21 0 comments 1 reaction 1 assignee Claimed by @hypy13 View on GitHub
Dominant language
CSS
Stars
365
Forks
35
Avg merge
1d 17h
Merged PRs (30d)
3

Description

Hi,

I’m using your admin theme and recently implemented a strict Content Security Policy that blocks inline JavaScript and such as a standard security measure. I noticed some issues, for example the logout button (the filter offcanvas too) uses:

```html
Logout
```

This doesn’t work with strict CSP. A simple fix is to use a form-based logout button instead, like this:

```html

{% csrf_token %}
Logout

```

Just wanted to share this in case it helps improve the theme. Thanks for your great work as always!

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.