Fix pylint warnings: logging, globals, exceptions, imports, duplicates
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/576427d4-4f6a-46d2-b75f-6862ecbcf526 Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
This commit is contained in:
@@ -78,11 +78,13 @@ class SecurityHeadersMiddleware(BaseHTTPMiddleware):
|
||||
# See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
csp_directives = [
|
||||
"default-src 'self'",
|
||||
# TODO: Remove 'unsafe-inline' - requires moving inline scripts to external files
|
||||
# TODO: Remove 'unsafe-eval' - no eval usage detected, safe to remove after testing
|
||||
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.tailwindcss.com https://cdn.jsdelivr.net",
|
||||
# TODO: Remove 'unsafe-inline' - requires moving inline styles to CSS or using nonces
|
||||
"style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net",
|
||||
# TODO: Remove 'unsafe-inline' - requires moving inline scripts to external files # pylint: disable=fixme
|
||||
# TODO: Remove 'unsafe-eval' - no eval usage detected, safe to remove after testing # pylint: disable=fixme
|
||||
"script-src 'self' 'unsafe-inline' 'unsafe-eval'"
|
||||
" https://cdn.tailwindcss.com https://cdn.jsdelivr.net",
|
||||
# TODO: Remove 'unsafe-inline' - requires moving inline styles to CSS or using nonces # pylint: disable=fixme
|
||||
"style-src 'self' 'unsafe-inline' https://fonts.googleapis.com"
|
||||
" https://cdn.jsdelivr.net",
|
||||
"font-src 'self' https://fonts.gstatic.com",
|
||||
"img-src 'self' data: https:",
|
||||
"connect-src 'self'",
|
||||
|
||||
Reference in New Issue
Block a user