# GSoC 2024 Proposal Feedback: Bring CORS and CSP into Core

**URL:** <https://forum.djangoproject.com/t/gsoc-2024-proposal-feedback-bring-cors-and-csp-into-core/29106>\
**Category:** Google Season of Code\
**Created:** [March 15, 2024, 8:29am UTC](https://forum.djangoproject.com/t/gsoc-2024-proposal-feedback-bring-cors-and-csp-into-core/29106 "2024-03-15T08:29:26Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![hrushikeshrv](https://sea2.discourse-cdn.com/flex026/user_avatar/forum.djangoproject.com/hrushikeshrv/32/27602_2.png) [@hrushikeshrv](https://forum.djangoproject.com/u/hrushikeshrv)\
**Post date:** [March 15, 2024, 8:29am UTC](https://forum.djangoproject.com/t/gsoc-2024-proposal-feedback-bring-cors-and-csp-into-core/29106/1 "2024-03-15T08:29:26Z")

</div>

Hi all, I had submitted a proposal to bring CORS and CSP into core last year as well, but it didn’t make the cut. This year I have created a proposal for the same topic, with some modifications to the proposed API which I think makes it cleaner.

@carltongibson could I ask you for some feedback on this new draft? Is there something which was missing last year that I can improve on this year? The link to the proposal is - [GSoC 2024 Proposal: Bring CORS and CSP Into Core - Google Docs](https://docs.google.com/document/d/1nxv4y6DCOK7PZlHv_hoKFTKyrZhhQr9lKcF_kX9B41A/edit)

Thanks!

---

<div class="post-metadata">

**Author:** ![carltongibson](https://sea2.discourse-cdn.com/flex026/user_avatar/forum.djangoproject.com/carltongibson/32/267_2.png) [@carltongibson](https://forum.djangoproject.com/u/carltongibson)\
**Post date:** [March 15, 2024, 8:50am UTC](https://forum.djangoproject.com/t/gsoc-2024-proposal-feedback-bring-cors-and-csp-into-core/29106/2 "2024-03-15T08:50:16Z")

</div>

Hi @hrushikeshrv — I think it was lack of capacity our end last year I’m afraid. The mentor team looks bigger this year so 🤞

I will check over the proposal. But also let me ping @adamchainz, who knows more about these topics specifically.

---

<div class="post-metadata">

**Author:** ![carltongibson](https://sea2.discourse-cdn.com/flex026/user_avatar/forum.djangoproject.com/carltongibson/32/267_2.png) [@carltongibson](https://forum.djangoproject.com/u/carltongibson)\
**Post date:** [March 15, 2024, 9:01am UTC](https://forum.djangoproject.com/t/gsoc-2024-proposal-feedback-bring-cors-and-csp-into-core/29106/3 "2024-03-15T09:01:36Z")

</div>

@hrushikeshrv I gave it a quick look over. It’s a good proposal. Maybe others can suggest tweaks.

Make sure you do apply! Good luck. 🤞

---

<div class="post-metadata">

**Author:** ![hrushikeshrv](https://sea2.discourse-cdn.com/flex026/user_avatar/forum.djangoproject.com/hrushikeshrv/32/27602_2.png) [@hrushikeshrv](https://forum.djangoproject.com/u/hrushikeshrv)\
**Post date:** [March 15, 2024, 9:05am UTC](https://forum.djangoproject.com/t/gsoc-2024-proposal-feedback-bring-cors-and-csp-into-core/29106/4 "2024-03-15T09:05:38Z")

</div>

Thank you for your feedback!