darkhelm/notifications-api
1
0
Fork 0
mirror of https://github.com/GSA/notifications-api.git synced 2026-09-07 02:28:26 -04:00
Code Issues Packages Projects Releases Wiki Activity

try to fix dynamic scan warnings

Browse Source
This commit is contained in:
Kenneth Kehl
2025-02-03 08:08:47 -08:00
parent ec02da930b
commit 8a70e728f2
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
app/__init__.py
View File

@@ -286,10 +286,13 @@ def init_app(app):
@app.after_request @app.after_request
def after_request(response): def after_request(response):
response.headers.add("X-Content-Type-Options", "nosniff") response.headers.add("X-Content-Type-Options", "nosniff")
# Some dynamic scan findings
response.headers.add("Cross-Origin-Opener-Policy", "same-origin") response.headers.add("Cross-Origin-Opener-Policy", "same-origin")
response.headers.add("Cross-Origin-Embedder-Policy", "require-corp") response.headers.add("Cross-Origin-Embedder-Policy", "require-corp")
response.headers.add("Cross-Origin-Resource-Policy", "same-origin") response.headers.add("Cross-Origin-Resource-Policy", "same-origin")
response.headers.add("Cross-Origin-Opener-Policy", "same-origin") response.headers.add("Cross-Origin-Opener-Policy", "same-origin")
response.headers.pop("Server", None)
return response return response