Merge pull request #46 from knaperek/add-sandbox-args

Extend Sandbox supported args list
sdelements · Feb 2, 2016 · 52f08a5 · 52f08a5
2 parents 2941e58 + e354de5
commit 52f08a5
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/security/middleware.py b/security/middleware.py
@@ -546,9 +546,12 @@ class ContentSecurityPolicyMiddleware(object):
 
     # sandbox allowed arguments
     # http://www.w3.org/html/wg/drafts/html/master/single-page.html#sandboxing
+    # https://www.w3.org/TR/CSP2/
     _CSP_SANDBOX_ARGS = [
         '',
         'allow-forms',
+        'allow-pointer-lock',
+        'allow-popups',
         'allow-same-origin',
         'allow-scripts',
         'allow-top-navigation',