Bump version to 0.10.0

Add CHANGELOG
yunojuno · Feb 17, 2023 · 4e3f309 · 4e3f309
1 parent 09ca1fc
commit 4e3f309
Show file tree

Hide file tree

Showing 4 changed files with 32 additions and 2 deletions.
diff --git a/CHANGELOG b/CHANGELOG
@@ -0,0 +1,8 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+## [0.10.0] - 2023-02-17
+
+- Improve admin list view to include date filters and value search [#8]
+- Implement directive downgrades [#6]
diff --git a/README.md b/README.md
@@ -68,6 +68,13 @@ highlight these the corresponding directive choice labels have been
 amended. Treat with caution as setting these attributes may have
 unintended consequences.
 
+#### Downgrading directives
+
+In some instances you may want to "downgrade" a directive - for instance
+converting all `script-src-elem` directives to `script-src` (for
+compatibility reasons). This can be done using the
+`CSP_REPORT_DIRECTIVE_DOWNGRADE` setting.
+
 ## Settings
 
 ### `CSP_ENABLED`
@@ -76,6 +83,21 @@ unintended consequences.
 
 Kill switch for the middleware. Defaults to `False` (disabled).
 
+### `CSP_REPORT_DIRECTIVE_DOWNGRADE`
+
+`dict[str, str]`, default =
+```python
+{
+    "script-src-elem": "script-src",
+    "script-src-attr": "script-src",
+    "style-src-elem": "style-src",
+    "style-src-attr": "style-src",
+}
+```
+
+This is used to transparently "downgrade" any directives to a different
+directive, and is primarily used for managing compatibility.
+
 ### `CSP_REPORT_ONLY`
 
 `bool`, default = `True`

diff --git a/csp/settings.py b/csp/settings.py
@@ -69,7 +69,7 @@
 # universally supported, then convert it to "script-src" on the fly.
 CSP_REPORT_DIRECTIVE_DOWNGRADE: dict[str, str] = getattr(
     settings,
-    "CSP_REPORT_DIRECTIVE_MAP",
+    "CSP_REPORT_DIRECTIVE_DOWNGRADE",
     {
         "script-src-elem": "script-src",
         "script-src-attr": "script-src",

diff --git a/pyproject.toml b/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "django-csp-plus"
-version = "0.9.3"
+version = "0.10.0"
 description = "CSP tracking and violation report endpoint."
 license = "MIT"
 authors = ["YunoJuno <[email protected]>"]