v5.4.0: feat: Middleware to add Content-Security-Policy headers (#289)

See changelog.

v5.3.0

Add logging for email error

v5.2.0

• Add new monitoring wrapper for background tasks.

v5.1.0: Merge pull request #242 from openedx/timmc/ip-code

Added:

• Utilities for safely determining the IP address of a request: edx_django_utils.ip (moved from edx-platform)

v5.0.1: docs: Relicense from AGPL 3 to Apache 2 (#239)

Changed:

• License has been changed from AGPL v3 to Apache v2 to reflect existing policies

Improvements to corrupt cookie logging

Changed:

• Corrupt cookie logging
  • Make independent of other cookie logging; no longer needs to meet cookie size threshold or sampling rate.
  • Breaking change, although low impact: Setting name changed from UNUSUAL_COOKIE_SAMPLING_PUBLIC_KEY to UNUSUAL_COOKIE_HEADER_PUBLIC_KEY.
  • New setting UNUSUAL_COOKIE_HEADER_LOG_CHUNK helps avoid truncated (non-decryptable) messages by splitting the output across multiple log messages.

Log headers of corrupted cookies

Added optional ability to log headers when a corrupted cookie is detected in a large (or sampled) cookie header. (Requires configuration of an encryption key.)

(No changes since 4.8.0, which was a mis-release.)

[DO NOT USE] Log headers of corrupted cookies

Added optional ability to log headers when a corrupted cookie is detected in a large (or sampled) cookie header. (Requires configuration of an encryption key.)

EDIT: Don't use this tag; version was not bumped in init file.

Add log_sensitive (extracted from edx-platform)

Added tools for encrypted logging of sensitive information.

• encrypt_for_log logging helper
• log-sensitive CLI command

Added CookieMonitoringMiddleware

See https://github.com/openedx/edx-django-utils/blob/master/CHANGELOG.rst#460---2022-03-16