Closed Bug 989121 Opened 6 years ago Closed 5 years ago
We're on django-csp 1.0.2 but 2.x is out. This will get us to start using the real headers instead of X-*. I read the docs and it looked like a straight upgrade with no code changes. I'd do it myself but I can't find the docs for putting packages on our pip server.
Docs are here: https://mana.mozilla.org/wiki/display/WebDev/pyrepo
Thanks I filed for access last week in bug 989360. Robhudson also sent me https://dpaste.de/afdT which is pretty sweet.
Assignee: nobody → clouserw
Depends on: 989360
https://github.com/mozilla/zamboni/commit/b441a408f0aa18b506f0c5f872bdf5c8fbfdafdc With this live, we should be able to turn CSP on for real in the Marketplace. I'll file bug 1093210.
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → 2014-11-11
You need to log in before you can comment on or make changes to this bug.