twaldear / flask-csp Goto Github PK

I know it's redundant and already mentioned in the guide you link to, but it could be helpful to remind users that the data permission is spelled with a colon, e.g.:

@csp_header({'default-src':"'none'",'script-src':"'self'", 'font-src': "data: 'self'"})

..if you are a little sloppy and in a hurry like me it was quite possible to lose a bit of time there.

Thanks for a nice extension!

It would be helpful if csp.py were refactored to make it easier to use it in other ways besides decorating a standard Flask route. For example, extracting a function to apply CSP to a Flask response, so that it could be called from an after_app_request hook.

This line in example has one to many brackets README.md#L92.

There is a try/except clause which uses a Python 2.5 syntax which is deprecated in 2.6 and removed in 3.0+.

The culprit is line 14 in csp.py: except Exception, e: should be except Exception as e: in Python 2.6+ according to the style guide.

Hey,

There are .pyc files in the repo. Noone needs them when cloning the repo, so please remove them and add .gitignore file with *.pyc record.

Also, this might be handy.

F:\Coding\app> python dash.py
Traceback (most recent call last):
File "dash.py", line 3, in
from flask_csp.csp import csp_header
File "C:\ProgramData\Anaconda3\lib\site-packages\flask_csp\csp.py", line 14
except Exception, e: