|
|
@ -133,7 +133,7 @@ def add_security_headers(resp):
|
|
|
|
resp.headers['X-Frame-Options'] = 'SAMEORIGIN'
|
|
|
|
resp.headers['X-Frame-Options'] = 'SAMEORIGIN'
|
|
|
|
resp.headers['X-XSS-Protection'] = '1; mode=block'
|
|
|
|
resp.headers['X-XSS-Protection'] = '1; mode=block'
|
|
|
|
resp.headers['Strict-Transport-Security'] = 'max-age=31536000; includeSubDomains'
|
|
|
|
resp.headers['Strict-Transport-Security'] = 'max-age=31536000; includeSubDomains'
|
|
|
|
log.debug(request.headers)
|
|
|
|
# log.debug(request.full_path)
|
|
|
|
return resp
|
|
|
|
return resp
|
|
|
|
|
|
|
|
|
|
|
|
web = Blueprint('web', __name__)
|
|
|
|
web = Blueprint('web', __name__)
|
|
|
|