removed: clickjack (no twitter card shows up) · GenstackOrg/Genstack@f287ba7 · GitHub

GenstackOrg / Genstack Public

• Notifications You must be signed in to change notification settings
• Fork 0
• Star 1

• Code
• Issues
• Pull requests
• Actions
• Projects
• Security and quality
• Insights

Additional navigation options

Commit f287ba7

Browse filesBrowse the repository at this point in the historyBrowse files

shreykx

committed

removed: clickjack (no twitter card shows up)

1 parent 449b23c commit f287ba7
Copy full SHA for f287ba7

1 file changed

-11Lines changed: 0 additions & 11 deletions

File tree

Expand file treeCollapse file tree

Open diff view settings

Filter options

• app
  • main.py

Expand file treeCollapse file tree

Open diff view settings

Collapse file

‎app/main.py‎

Copy file name to clipboardExpand all lines: app/main.py

-11Lines changed: 0 additions & 11 deletions

Original file line number	Diff line number	Diff line change
@@ -12,17 +12,6 @@
12	12
13	13	app = FastAPI()
14	14
15		- # --- clickjacking protection middleware ---
16		- @app.middleware("http")
17		- async def clickjacking_protect(request: Request, call_next):
18		- response = await call_next(request)
19		- user_agent = request.headers.get("user-agent", "").lower()
20		- if "twitterbot" in user_agent or "facebookexternalhit" in user_agent:
21		- return response
22		- response.headers["X-Frame-Options"] = "DENY"
23		- response.headers["Content-Security-Policy"] = "frame-ancestors 'self';"
24		- return response
25		- # --- end middleware ---
26	15
27	16	def rate_limit_exception_handler(request: Request, exc: Exception) -> Response:
28	17	assert isinstance(exc, RateLimitExceeded)

0 commit comments

Comments

0 (0)