Set default policy to nothing, only report.

12 years ago · 5b53d2db45
parent 23b9f09177
commit 5b53d2db45
1 changed files with 1 additions and 2 deletions
--- a/IPython/html/base/handlers.py
+++ b/IPython/html/base/handlers.py
@ -48,8 +48,7 @@ class AuthenticatedHandler(web.RequestHandler):
        headers = self.settings.get('headers', {})

        if "Content-Security-Policy" not in headers:
-            #headers["Content-Security-Policy"] = ""
-            pass
+            headers["Content-Security-Policy"] = ""

        if "Content-Security-Policy-Report-Only" not in headers: