Remove DjangoCSP dependency by writing own middleware for the CSP header

This commit is contained in:
W13R 2022-05-15 11:24:04 +02:00
parent 9406bbad97
commit f8cde7136d
3 changed files with 12 additions and 2 deletions

View file

@ -0,0 +1,11 @@
# Define CSP middleware:
def csp_middleware(get_response):
def middleware(request):
response = get_response(request)
response["content-security-policy"] = "default-src 'self'"
return response
return middleware

View file

@ -67,7 +67,7 @@ MIDDLEWARE = [
'django.contrib.messages.middleware.MessageMiddleware', 'django.contrib.messages.middleware.MessageMiddleware',
'django.middleware.clickjacking.XFrameOptionsMiddleware', 'django.middleware.clickjacking.XFrameOptionsMiddleware',
"django_currentuser.middleware.ThreadLocalUserMiddleware", "django_currentuser.middleware.ThreadLocalUserMiddleware",
"csp.middleware.CSPMiddleware" "app.middleware.csp_middleware"
] ]
ROOT_URLCONF = 'drinks_manager.urls' ROOT_URLCONF = 'drinks_manager.urls'

View file

@ -1,5 +1,4 @@
django~=3.2.7 django~=3.2.7
django-currentuser==0.5.3 django-currentuser==0.5.3
django-csp==3.7
psycopg2~=2.9.1 psycopg2~=2.9.1
uvicorn~=0.17.6 uvicorn~=0.17.6