CSP header: enforce mode
@@ -105,7 +105,7 @@ class CommunityBaseSettings(Settings):
CSP_FRAME_ANCESTORS = ("'none'",)
CSP_OBJECT_SRC = ("'none'",)
CSP_REPORT_URI = None
- CSP_REPORT_ONLY = True # Set to false to enable CSP in blocking mode
+ CSP_REPORT_ONLY = False
CSP_EXCLUDE_URL_PREFIXES = (
"/admin/",
)
