Format code
This commit is contained in:
10
atst/app.py
10
atst/app.py
@@ -102,10 +102,14 @@ def set_default_headers(app):
|
|||||||
response.headers["X-Frame-Options"] = "SAMEORIGIN"
|
response.headers["X-Frame-Options"] = "SAMEORIGIN"
|
||||||
response.headers["X-XSS-Protection"] = "1; mode=block"
|
response.headers["X-XSS-Protection"] = "1; mode=block"
|
||||||
|
|
||||||
if ENV == 'dev':
|
if ENV == "dev":
|
||||||
response.headers["Content-Security-Policy"] = "default-src 'self' 'unsafe-eval'; connect-src *"
|
response.headers[
|
||||||
|
"Content-Security-Policy"
|
||||||
|
] = "default-src 'self' 'unsafe-eval'; connect-src *"
|
||||||
else:
|
else:
|
||||||
response.headers["Content-Security-Policy"] = "default-src 'self' 'unsafe-eval'"
|
response.headers[
|
||||||
|
"Content-Security-Policy"
|
||||||
|
] = "default-src 'self' 'unsafe-eval'"
|
||||||
|
|
||||||
return response
|
return response
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user