Remove DjangoCSP dependency by writing own middleware for the CSP header
This commit is contained in:
parent
9406bbad97
commit
f8cde7136d
3 changed files with 12 additions and 2 deletions
11
application/app/middleware.py
Normal file
11
application/app/middleware.py
Normal file
|
@ -0,0 +1,11 @@
|
|||
|
||||
# Define CSP middleware:
|
||||
|
||||
def csp_middleware(get_response):
|
||||
|
||||
def middleware(request):
|
||||
response = get_response(request)
|
||||
response["content-security-policy"] = "default-src 'self'"
|
||||
return response
|
||||
|
||||
return middleware
|
|
@ -67,7 +67,7 @@ MIDDLEWARE = [
|
|||
'django.contrib.messages.middleware.MessageMiddleware',
|
||||
'django.middleware.clickjacking.XFrameOptionsMiddleware',
|
||||
"django_currentuser.middleware.ThreadLocalUserMiddleware",
|
||||
"csp.middleware.CSPMiddleware"
|
||||
"app.middleware.csp_middleware"
|
||||
]
|
||||
|
||||
ROOT_URLCONF = 'drinks_manager.urls'
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue