diff --git a/application/app/middleware.py b/application/app/middleware.py new file mode 100644 index 0000000..43acf6c --- /dev/null +++ b/application/app/middleware.py @@ -0,0 +1,11 @@ + +# Define CSP middleware: + +def csp_middleware(get_response): + + def middleware(request): + response = get_response(request) + response["content-security-policy"] = "default-src 'self'" + return response + + return middleware diff --git a/application/drinks_manager/settings.py b/application/drinks_manager/settings.py index 2a6674d..6dc0a14 100644 --- a/application/drinks_manager/settings.py +++ b/application/drinks_manager/settings.py @@ -67,7 +67,7 @@ MIDDLEWARE = [ 'django.contrib.messages.middleware.MessageMiddleware', 'django.middleware.clickjacking.XFrameOptionsMiddleware', "django_currentuser.middleware.ThreadLocalUserMiddleware", - "csp.middleware.CSPMiddleware" + "app.middleware.csp_middleware" ] ROOT_URLCONF = 'drinks_manager.urls' diff --git a/pip-dependencies.txt b/pip-dependencies.txt index 3107a0b..da50c9d 100644 --- a/pip-dependencies.txt +++ b/pip-dependencies.txt @@ -1,5 +1,4 @@ django~=3.2.7 django-currentuser==0.5.3 -django-csp==3.7 psycopg2~=2.9.1 uvicorn~=0.17.6