More template fixes

This commit is contained in:
Thomas Sileo 2022-07-15 20:16:02 +02:00
parent d38fec6570
commit 0d3b41272f
3 changed files with 6 additions and 5 deletions

View file

@ -128,9 +128,9 @@ class CustomMiddleware:
headers["x-xss-protection"] = "1; mode=block"
headers["x-frame-options"] = "SAMEORIGIN"
# TODO(ts): disallow inline CSS?
headers["content-security-policy"] = (
"default-src 'self'" + " style-src 'self' 'unsafe-inline';"
)
headers[
"content-security-policy"
] = "default-src 'self' style-src 'unsafe-inline';"
if not DEBUG:
headers[
"strict-transport-security"