vbatts/microblog.pub
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

More fixes

Browse source
This commit is contained in:
Thomas Sileo 2022-06-29 22:20:01 +02:00
parent f560821be0
commit c2be8ba053
2 changed files with 12 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
app/main.py
View file

@ -116,7 +116,13 @@ async def request_middleware(request, call_next):
@app.middleware("http")
async def add_security_headers(request: Request, call_next):
response = await call_next(request)
try:
response = await call_next(request)
except RuntimeError as exc:
# https://github.com/encode/starlette/discussions/1527#discussioncomment-2234702
if await request.is_disconnected() and str(exc) == "No response returned.":
return Response(status_code=204)
response.headers["referrer-policy"] = "no-referrer, strict-origin-when-cross-origin"
response.headers["x-content-type-options"] = "nosniff"
response.headers["x-xss-protection"] = "1; mode=block"