torchbox · nickmoreton · Jul 10, 2025
diff --git a/docs/upgrading.md b/docs/upgrading.md
@@ -82,6 +82,14 @@ As much as possible, we want to use the official releases available on PyPI for
 - wagtailmedia
 - wagtail-purge
 
+## django-csp
+
+**Last tested for wagtail 7.0.1 upgrade** The current version of django-csp is ~3.8
+
+v4.0 has breaking changes, so we are using the latest version of v3.x.
+
+See the django-csp upgrade notes <https://github.com/mozilla/django-csp/blob/main/CHANGES.md#40>
+
 ## Custom wagtail admin templates
 
 **Last checked** Wagtail 7.0 upgrade

diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -17,7 +17,7 @@ Wand = "^0.6.10"
 # Django packages
 django-basic-auth-ip-whitelist = "^0.8"
 django-birdbath = "^2.0.0"
-django-csp = "^4.0"
+django-csp = "~3.8" # v4.0 has breaking changes see upgrading notes
 django-pattern-library = "^1.3.0"
 django-permissions-policy = "^4.26.0"
 django-phonenumber-field = "^8.1.0"