More template fixes
This commit is contained in:
parent
d38fec6570
commit
0d3b41272f
3 changed files with 6 additions and 5 deletions
|
@ -128,9 +128,9 @@ class CustomMiddleware:
|
|||
headers["x-xss-protection"] = "1; mode=block"
|
||||
headers["x-frame-options"] = "SAMEORIGIN"
|
||||
# TODO(ts): disallow inline CSS?
|
||||
headers["content-security-policy"] = (
|
||||
"default-src 'self'" + " style-src 'self' 'unsafe-inline';"
|
||||
)
|
||||
headers[
|
||||
"content-security-policy"
|
||||
] = "default-src 'self' style-src 'unsafe-inline';"
|
||||
if not DEBUG:
|
||||
headers[
|
||||
"strict-transport-security"
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue