darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-09-02 17:48:50 -04:00
Code Issues Packages Projects Releases Wiki Activity

Get config from current app

Browse Source
This commit is contained in:
Chris Hill-Scott
2018-11-29 12:07:48 +00:00
parent bc6b9c7af7
commit 23cc182b6f
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
app/__init__.py
View File

@@ -496,7 +496,6 @@ def save_service_or_org_after_request(response):
# https://www.owasp.org/index.php/List_of_useful_HTTP_headers # https://www.owasp.org/index.php/List_of_useful_HTTP_headers
def useful_headers_after_request(response): def useful_headers_after_request(response):
notify_environment = os.environ['NOTIFY_ENVIRONMENT']
response.headers.add('X-Frame-Options', 'deny') response.headers.add('X-Frame-Options', 'deny')
response.headers.add('X-Content-Type-Options', 'nosniff') response.headers.add('X-Content-Type-Options', 'nosniff')
response.headers.add('X-XSS-Protection', '1; mode=block') response.headers.add('X-XSS-Protection', '1; mode=block')
@@ -508,7 +507,7 @@ def useful_headers_after_request(response):
"font-src 'self' {asset_domain} data:;" "font-src 'self' {asset_domain} data:;"
"img-src 'self' {asset_domain} *.google-analytics.com *.notifications.service.gov.uk {logo_domain} data:;" "img-src 'self' {asset_domain} *.google-analytics.com *.notifications.service.gov.uk {logo_domain} data:;"
"frame-src 'self' www.youtube.com;".format( "frame-src 'self' www.youtube.com;".format(
asset_domain=configs[notify_environment].ASSET_DOMAIN, asset_domain=current_app.config['ASSET_DOMAIN'],
logo_domain=get_logo_cdn_domain(), logo_domain=get_logo_cdn_domain(),
) )
)) ))