+ Tj f^RIt^RIHt^RIHtHt!RR]4t!RR]4tRtR R lt R#) N)StrEnum)SimpleLazyObjectemptycF]tRt^tRtRtRtRtRtRt Rt Rt R t R t R tR tR tR#)CSPa Content Security Policy constants for directive values and special tokens. These constants represent: 1. Standard quoted string values from the CSP spec (e.g., 'self', 'unsafe-inline') 2. Special placeholder tokens (NONCE) that get replaced by the middleware Using this enum instead of raw strings provides better type checking, autocompletion, and protection against common mistakes like: - Typos (e.g., 'noone' instead of 'none') - Missing quotes (e.g., ["self"] instead of ["'self'"]) - Inconsistent quote styles (e.g., ["'self'", ""unsafe-inline""]) Example usage in Django settings: SECURE_CSP = { "default-src": [CSP.NONE], "script-src": [CSP.SELF, CSP.NONCE], } zContent-Security-Policyz#Content-Security-Policy-Report-Onlyz'none'z'report-sample'z'self'z'strict-dynamic'z 'unsafe-eval'z'unsafe-hashes'z'unsafe-inline'z'wasm-unsafe-eval'zN)__name__ __module__ __qualname____firstlineno____doc__HEADER_ENFORCEHEADER_REPORT_ONLYNONE REPORT_SAMPLESELFSTRICT_DYNAMIC UNSAFE_EVAL UNSAFE_HASHES UNSAFE_INLINEWASM_UNSAFE_EVALNONCE__static_attributes__rE/var/www/idalgo/venv/lib/python3.14/site-packages/django/utils/csp.pyrrsF2/N> D%M D'N!K%M%M+ #Errc<aa]tRt^4toRtV3RltRtRtVtV;t #) LazyNonceaK Lazily generates a cryptographically secure nonce string, for use in CSP headers. The nonce is only generated when first accessed (e.g., via string interpolation or inside a template). The nonce will evaluate as `True` if it has been generated, and `False` if it has not. This is useful for third-party Django libraries that want to support CSP without requiring it. Example Django template usage with context processors enabled: The `{% if %}` block will only render if the nonce has been evaluated elsewhere. c.<\SV`\4R#N)super__init__generate_nonce)self __class__s&rr!LazyNonce.__init__Is (rc&VP\J#r)_wrappedr)r#s&r__bool__LazyNonce.__bool__Ls}}E))rr) r r r r r r!r(r__classdictcell__ __classcell__)r$ __classdict__s@@rrr4s()**rrc.\P!^4#))secrets token_urlsaferrrr"r"Ps   $$rc.pVP4EFwr4VR9dKVRJdRpM\V\4'd \V4pM$\V\\ ,4'gV.p\ PV9;p'd5V'd-VUu.uFqw\ P8XdRV R2MTNK! ppM/V'd(VUu.uFqw\ P8wgKVNK ppV'gKRPV4pVPV RV 2P44EK RPV4#uupiuupi)NTz'nonce-' z; )NF) items isinstancesetsortedlisttuplerrjoinappendrstrip)confignoncepolicy directivevaluesrendered_value has_sentinelvs&& r build_policyrFTs F#\\^ ] "  T>N&#&& u 55 !$ V 33 3OUVv!SYYGE7!,AEvV%+>VCII~!!V> XXf-N  1^$45<<>?5,8 99V W>s%E E 'E r) r/enumrdjango.utils.functionalrrrrr"rFrrrrIs2;*#'*#Z* *8%r