Files
www/membership/members/middleware.py
T
2026-10-23 12:02:50 -04:00

11 lines
477 B
Python
Executable File

class SecurityHeaders:
def __init__(self, get_response):
self.get_response = get_response
def __call__(self, request):
response = self.get_response(request)
response["Cache-Control"] = "no-store"
response["Referrer-Policy"] = "no-referrer"
response["Content-Security-Policy"] = "default-src 'none'; style-src 'self'; img-src 'self'; form-action 'self'; base-uri 'none'; frame-ancestors 'none'"
return response