From 5d82305e18f2860356e1ac1f533d8f271e4c0338 Mon Sep 17 00:00:00 2001 From: Raphael Michel Date: Mon, 19 Dec 2022 14:53:32 +0100 Subject: [PATCH] CSP: Deduplicate identical values --- src/pretix/base/middleware.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/pretix/base/middleware.py b/src/pretix/base/middleware.py index 407f67e173..e7413fd9bf 100644 --- a/src/pretix/base/middleware.py +++ b/src/pretix/base/middleware.py @@ -306,7 +306,7 @@ class SecurityMiddleware(MiddlewareMixin): resp['Content-Security-Policy'] = _render_csp(h).format(static=staticdomain, dynamic=dynamicdomain, media=mediadomain) for k, v in h.items(): - h[k] = ' '.join(v).format(static=staticdomain, dynamic=dynamicdomain, media=mediadomain).split(' ') + h[k] = sorted(set(' '.join(v).format(static=staticdomain, dynamic=dynamicdomain, media=mediadomain).split(' '))) resp['Content-Security-Policy'] = _render_csp(h) elif 'Content-Security-Policy' in resp: del resp['Content-Security-Policy']