From 5b53d2db45e92826c22726445b04bc3c2c671a54 Mon Sep 17 00:00:00 2001 From: Kyle Kelley Date: Sat, 22 Nov 2014 16:23:17 -0600 Subject: [PATCH] Set default policy to nothing, only report. --- IPython/html/base/handlers.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/IPython/html/base/handlers.py b/IPython/html/base/handlers.py index 6b34488e3..07d0ce45c 100644 --- a/IPython/html/base/handlers.py +++ b/IPython/html/base/handlers.py @@ -48,8 +48,7 @@ class AuthenticatedHandler(web.RequestHandler): headers = self.settings.get('headers', {}) if "Content-Security-Policy" not in headers: - #headers["Content-Security-Policy"] = "" - pass + headers["Content-Security-Policy"] = "" if "Content-Security-Policy-Report-Only" not in headers: