From 72455209bba71eb34eafa761ec3e647957e8d813 Mon Sep 17 00:00:00 2001 From: Richard Schreiber Date: Tue, 16 Nov 2021 09:24:19 +0100 Subject: [PATCH] CSP: Strip keys with empty values from header (#2322) --- src/pretix/base/middleware.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/pretix/base/middleware.py b/src/pretix/base/middleware.py index 6cafeab493..100c5a89bd 100644 --- a/src/pretix/base/middleware.py +++ b/src/pretix/base/middleware.py @@ -208,7 +208,7 @@ def _parse_csp(header): def _render_csp(h): - return "; ".join(k + ' ' + ' '.join(v) for k, v in h.items()) + return "; ".join(k + ' ' + ' '.join(v) for k, v in h.items() if v) def _merge_csp(a, b):