aurweb.asgi: patch invalid f-string

Signed-off-by: Kevin Morris <kevr@0cost.org>
This commit is contained in:
Kevin Morris 2021-06-26 04:20:55 -07:00
parent bfffdd4d91
commit 04ab98907a

View file

@ -89,7 +89,7 @@ async def add_security_headers(request: Request, call_next: typing.Callable):
]
csp += f"script-src 'self' 'nonce-{nonce}' " + ' '.join(script_hosts)
# It's fine if css is inlined.
csp += f"; style-src 'self' 'unsafe-inline'"
csp += "; style-src 'self' 'unsafe-inline'"
response.headers["Content-Security-Policy"] = csp
# Add XTCO header.