diff options
| author | bankc <bankc@google.com> | 2020-08-26 12:09:19 -0400 |
|---|---|---|
| committer | Mariusz Felisiak <felisiak.mariusz@gmail.com> | 2021-03-30 19:59:24 +0200 |
| commit | db5b75f10fe211af9fab9094f937436760db8488 (patch) | |
| tree | 8a1ba3eb35bc2e16b68b2bbb195881774a8abbc2 /django/middleware | |
| parent | f6018c1e63a04e0c12e2ca759e76e05ccf5e09de (diff) | |
Fixed #31840 -- Added support for Cross-Origin Opener Policy header.
Thanks Adam Johnson and Tim Graham for the reviews.
Co-authored-by: Tim Graham <timograham@gmail.com>
Diffstat (limited to 'django/middleware')
| -rw-r--r-- | django/middleware/security.py | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/django/middleware/security.py b/django/middleware/security.py index f27c6804b9..b9c5da9db5 100644 --- a/django/middleware/security.py +++ b/django/middleware/security.py @@ -17,6 +17,7 @@ class SecurityMiddleware(MiddlewareMixin): self.redirect_host = settings.SECURE_SSL_HOST self.redirect_exempt = [re.compile(r) for r in settings.SECURE_REDIRECT_EXEMPT] self.referrer_policy = settings.SECURE_REFERRER_POLICY + self.cross_origin_opener_policy = settings.SECURE_CROSS_ORIGIN_OPENER_POLICY def process_request(self, request): path = request.path.lstrip("/") @@ -52,4 +53,9 @@ class SecurityMiddleware(MiddlewareMixin): if isinstance(self.referrer_policy, str) else self.referrer_policy )) + if self.cross_origin_opener_policy: + response.setdefault( + 'Cross-Origin-Opener-Policy', + self.cross_origin_opener_policy, + ) return response |