start the security application (#85759)

@@ -0,0 +28,4 @@
+        content_security_policy_report_uri = getattr(settings, 'CONTENT_SECURITY_POLICY_REPORT_URI', None)
+
+        if content_security_policy and CSP_HEADER_NAME not in response.headers:
+            response[CSP_HEADER_NAME] = content_security_policy

@@ -0,0 +35,4 @@
+
+        if content_security_policy_report_uri:
+            if policy := response.headers.get(CSP_HEADER_NAME):
+                if 'report-uri' not in policy:

@@ -0,0 +1,98 @@
+# hobo - portal to configure and deploy applications
+# Copyright (C) 2015-2022  Entr'ouvert

@@ -0,0 +61,4 @@
+    for directive in directives:
+        head, rest = directive.split(' ', 1)
+        if head not in HEADS:
+            raise ValidationError(_('Invalid CSP directive "%s"') % head)

@@ -0,0 +72,4 @@
+                    if needle == source:
+                        break
+            else:
+                raise ValidationError(_('Invalid CSP source "%s" in directive "%s"') % (source, head))

@@ -0,0 +25,4 @@
+    UPDATE_LAST_SEEN_PERIOD = datetime.timedelta(minutes=10)
+
+    def get_content(self):
+        return {key.replace('-', '_'): value for key, value in self.content.items()}

@@ -0,0 +7,4 @@
+def common_domains(urls):
+    '''Compute fewest common domains between urls'''
+    common = None
+    for url in urls: