feat: set up HTTP security headers

using https://github.com/GoogleCloudPlatform/flask-talisman
engineervix · Sep 30, 2022 · 2652a91 · 2652a91
1 parent b2a8fd7
commit 2652a91
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/requirements.txt b/requirements.txt
@@ -11,6 +11,7 @@ flask-mail==0.9.1
 flask-moment==1.0.2
 flask-restful==0.3.9
 flask-script==2.0.6
+flask-talisman==1.0.0
 flask-wtf==0.15.1
 markupsafe==2.0.1  # https://stackoverflow.com/questions/72191560/importerror-cannot-import-name-soft-unicode-from-markupsafe
 termcolor==1.1.0

diff --git a/tenlists/webapp/ten_lists/__init__.py b/tenlists/webapp/ten_lists/__init__.py
@@ -6,6 +6,7 @@
 from flask_moment import Moment
 from flask_restful import Api
 
+from flask_talisman import Talisman
 from werkzeug.middleware.proxy_fix import ProxyFix
 
 config = {
@@ -30,6 +31,7 @@ def create_app():
 
     mail.init_app(app)
     moment.init_app(app)
+    Talisman(app)
 
     if app.debug:
         toolbar.init_app(app)