# Define CSP middleware: def csp_middleware(get_response): def middleware(request): response = get_response(request) response["content-security-policy"] = "default-src 'self'" return response return middleware