diff --git a/apps/common/middleware/chat_headers_middleware.py b/apps/common/middleware/chat_headers_middleware.py index 904ab229892..dc35dbdb214 100644 --- a/apps/common/middleware/chat_headers_middleware.py +++ b/apps/common/middleware/chat_headers_middleware.py @@ -1,11 +1,12 @@ # coding=utf-8 """ - @project: maxkb - @Author:虎 - @file: static_headers_middleware.py - @date:2024/3/13 18:26 - @desc: +@project: maxkb +@Author:虎 +@file: static_headers_middleware.py +@date:2024/3/13 18:26 +@desc: """ + from django.utils.deprecation import MiddlewareMixin from common.cache_data.application_access_token_cache import get_application_access_token @@ -17,23 +18,26 @@ class ChatHeadersMiddleware(MiddlewareMixin): def process_response(self, request, response): if request.path.startswith(CONFIG.get_chat_path()) and not request.path.startswith( - CONFIG.get_chat_path() + '/api'): - access_token = request.path.replace(CONFIG.get_chat_path() + '/', '') - if access_token.__contains__('/') or access_token == 'undefined': + CONFIG.get_chat_path() + "/api" + ): + access_token = request.path.replace(CONFIG.get_chat_path() + "/", "") + if access_token.__contains__("/") or access_token == "undefined": return response application_access_token = get_application_access_token(access_token, True) if application_access_token is not None: - white_active = application_access_token.get('white_active', False) - white_list = application_access_token.get('white_list', []) - application_icon = escape(application_access_token.get('application_icon') or '') - application_name = escape(application_access_token.get('application_name') or '') + white_active = application_access_token.get("white_active", False) + white_list = application_access_token.get("white_list", []) + application_icon = escape(application_access_token.get("application_icon") or "") + application_name = escape(application_access_token.get("application_name") or "") if white_active: # 添加自定义的响应头 - response[ - 'Content-Security-Policy'] = f'frame-ancestors {" ".join(white_list)}' - response.content = (response.content.decode('utf-8').replace( - '', - f'') - .replace('