remove etag from API HTML view (because it shows the username)

This commit is contained in:
Laura Klünder 2017-10-28 14:16:58 +02:00
parent 80497a31a4
commit a433a204e2
2 changed files with 13 additions and 0 deletions

View file

@ -0,0 +1,12 @@
class RemoveEtagFromHTMLApiViewMiddleware:
def __init__(self, get_response):
self.get_response = get_response
def __call__(self, request):
response = self.get_response(request)
if request.path.startswith('/api/'):
if response['content-type'].startswith('text/html') and response.has_header('etag'):
del response['etag']
return response

View file

@ -193,6 +193,7 @@ MIDDLEWARE = [
'django.contrib.auth.middleware.AuthenticationMiddleware',
'django.contrib.messages.middleware.MessageMiddleware',
'django.middleware.clickjacking.XFrameOptionsMiddleware',
'c3nav.api.middleware.RemoveEtagFromHTMLApiViewMiddleware'
]
with suppress(ImportError):