| def main(request, response): | |
| headers = [] | |
| if request.GET.first(b'xFrameOptions', None): | |
| headers.append((b'X-Frame-Options', request.GET[b'xFrameOptions'])) | |
| csp_header = b'Content-Security-Policy-Report-Only' \ | |
| if request.GET.first(b'reportOnly', None) == b'true' else b'Content-Security-Policy' | |
| headers.append((csp_header, b"frame-ancestors 'none'; report-uri /reporting/resources/report.py?op=put&reportID=" + request.GET[b'reportID'])) | |
| return headers, b'{}' |