Remove DjangoCSP dependency by writing own middleware for the CSP header
This commit is contained in:
parent
9406bbad97
commit
f8cde7136d
3 changed files with 12 additions and 2 deletions
11
application/app/middleware.py
Normal file
11
application/app/middleware.py
Normal file
|
@ -0,0 +1,11 @@
|
|||
|
||||
# Define CSP middleware:
|
||||
|
||||
def csp_middleware(get_response):
|
||||
|
||||
def middleware(request):
|
||||
response = get_response(request)
|
||||
response["content-security-policy"] = "default-src 'self'"
|
||||
return response
|
||||
|
||||
return middleware
|
|
@ -67,7 +67,7 @@ MIDDLEWARE = [
|
|||
'django.contrib.messages.middleware.MessageMiddleware',
|
||||
'django.middleware.clickjacking.XFrameOptionsMiddleware',
|
||||
"django_currentuser.middleware.ThreadLocalUserMiddleware",
|
||||
"csp.middleware.CSPMiddleware"
|
||||
"app.middleware.csp_middleware"
|
||||
]
|
||||
|
||||
ROOT_URLCONF = 'drinks_manager.urls'
|
||||
|
|
|
@ -1,5 +1,4 @@
|
|||
django~=3.2.7
|
||||
django-currentuser==0.5.3
|
||||
django-csp==3.7
|
||||
psycopg2~=2.9.1
|
||||
uvicorn~=0.17.6
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue