Installing django-csp
First, install django-csp via pip or from source:
pip install django-csp
Add the csp app to your INSTALLED_APPS
in your project’s settings
module:
INSTALLED_APPS = (
# ...
"csp",
# ...
)
Now edit your project’s settings
module, to add the django-csp middleware
to MIDDLEWARE
, like so:
MIDDLEWARE = (
# ...
"csp.middleware.CSPMiddleware",
# ...
)
Note
Middleware order does not matter unless you have other middleware modifying the CSP header, or requires CSP features like a nonce. See Using the generated CSP nonce for further advice on middleware order.
That should do it! Go on to configuring CSP.