Remove DjangoCSP dependency by writing own middleware for the CSP header

This commit is contained in:
W13R 2022-05-15 11:24:04 +02:00
parent 9406bbad97
commit f8cde7136d
3 changed files with 12 additions and 2 deletions

View file

@ -0,0 +1,11 @@
# Define CSP middleware:
def csp_middleware(get_response):
def middleware(request):
response = get_response(request)
response["content-security-policy"] = "default-src 'self'"
return response
return middleware

View file

@ -67,7 +67,7 @@ MIDDLEWARE = [
'django.contrib.messages.middleware.MessageMiddleware',
'django.middleware.clickjacking.XFrameOptionsMiddleware',
"django_currentuser.middleware.ThreadLocalUserMiddleware",
"csp.middleware.CSPMiddleware"
"app.middleware.csp_middleware"
]
ROOT_URLCONF = 'drinks_manager.urls'