django-rest-framework/rest_framework/templates/rest_framework
Luka Jeran 6ec6ddea9b
Avoid inline script execution for injecting CSRF token (#7016)
Scripts with type="application/json" or "text/plain" are not executed, so we can
use them to inject dynamic CSRF data, without allowing inline-script execution
in Content-Security-Policy.
2022-11-29 16:10:32 +00:00
..
admin Admin renderer urls (#5988) 2018-07-06 10:58:26 +02:00
docs Replace all url() calls with path() or re_path() (#7512) 2020-09-08 15:32:27 +01:00
filters Overlooked translation in search.html (#7551) 2021-03-09 10:21:11 +00:00
horizontal Made TemplateHTMLRenderer render IntegerField inputs when value is 0. (#5834) 2018-02-16 16:48:20 +01:00
inline Made TemplateHTMLRenderer render IntegerField inputs when value is 0. (#5834) 2018-02-16 16:48:20 +01:00
pagination Consistent 2 space tabbing and formatting 2015-06-18 09:00:05 -04:00
vertical Made TemplateHTMLRenderer render IntegerField inputs when value is 0. (#5834) 2018-02-16 16:48:20 +01:00
admin.html Avoid inline script execution for injecting CSRF token (#7016) 2022-11-29 16:10:32 +00:00
api.html Change package name: djangorestframework -> rest_framework 2012-09-20 13:06:27 +01:00
base.html Avoid inline script execution for injecting CSRF token (#7016) 2022-11-29 16:10:32 +00:00
login_base.html Load 'static' instead of 'staticfiles' in templates (#5773) 2018-01-26 00:43:55 -05:00
login.html extend base login template 2013-04-17 10:15:02 -04:00
raw_data_form.html Change serializer field help_text rendering in browsable api (#3812) 2016-06-02 15:21:57 +01:00
schema.js Fallback to more widely supported JS feature sets. (#4961) 2017-03-10 12:07:15 +00:00