Security

Django's Built-In CSP: What 6.0 Shipped and 6.1 Fixed

Django 6.0 moved Content Security Policy into core and 6.1 made the admin survive a nonce policy. Here is what breaks when you switch it on.