From e2b97cda95e8b258a671d649c288047f9b10a7ad Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Benjamin=20H=C3=A4ttasch?=
<benjamin.haettasch@fachschaft.informatik.tu-darmstadt.de>
Date: Sat, 15 May 2021 20:30:49 +0200
Subject: [PATCH] Fix CSP for new event wizard (allow loading external
style/script files for datepicker)
---
AKModel/urls.py | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/AKModel/urls.py b/AKModel/urls.py
index f70ed739..64527851 100644
--- a/AKModel/urls.py
+++ b/AKModel/urls.py
@@ -1,3 +1,4 @@
+from csp.decorators import csp_update
from django.apps import apps
from django.urls import include, path
from rest_framework.routers import DefaultRouter
@@ -51,7 +52,7 @@ def get_admin_urls_event_wizard(admin_site):
return [
path('add/wizard/start/', admin_site.admin_view(NewEventWizardStartView.as_view()),
name="new_event_wizard_start"),
- path('add/wizard/settings/', admin_site.admin_view(NewEventWizardSettingsView.as_view()),
+ path('add/wizard/settings/', csp_update(FONT_SRC=["maxcdn.bootstrapcdn.com"], SCRIPT_SRC=["cdnjs.cloudflare.com"], STYLE_SRC=["cdnjs.cloudflare.com"])(admin_site.admin_view(NewEventWizardSettingsView.as_view())),
name="new_event_wizard_settings"),
path('add/wizard/created/<slug:event_slug>/', admin_site.admin_view(NewEventWizardPrepareImportView.as_view()),
name="new_event_wizard_prepare_import"),
--
GitLab