J
jeremy
8 minutes
Django csp_override Decorator Replaces a View's Policy Instead of Merging
`django.views.decorators.csp.csp_override` and `csp_report_only_override` give one view its own policy dict, which replaces the `SECURE_CSP` / `SECURE_CSP_REPORT_ONLY` setting for that response rather than adding to it.