From 449550ac90a98442efdd399d74f83ce5c4916330 Mon Sep 17 00:00:00 2001 From: bruno Date: Tue, 14 Jul 2026 00:47:08 -0400 Subject: [PATCH] =?UTF-8?q?fix:=20wire=20CSP=20+=20RateLimit=20middleware?= =?UTF-8?q?=20in=20main.py=20(=C3=A9taient=20d=C3=A9finis=20mais=20pas=20b?= =?UTF-8?q?ranch=C3=A9s)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Audit v3.0.1: 2/21 features ✗ → CSP/rate-limit middleware non importés dans main.py. Maintenant branchés. --- app/main.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/app/main.py b/app/main.py index f7203bf..c59782d 100644 --- a/app/main.py +++ b/app/main.py @@ -12,6 +12,7 @@ from starlette.middleware.sessions import SessionMiddleware from app.config import settings from app.db import init_db from app.middleware.csrf import CSRFMiddleware +from app.middleware.security import ContentSecurityPolicyMiddleware, RateLimitMiddleware from app.routers import dashboard, board, notes, api, auth, webhooks, collections, my_tasks, workspace, public_api, admin from app.routers.gitea import router as gitea_router from app.services.gitea_client import gitea @@ -48,6 +49,8 @@ app = FastAPI( app.add_middleware(SessionMiddleware, secret_key=settings.app_secret_key, max_age=3600) app.add_middleware(CSRFMiddleware) +app.add_middleware(ContentSecurityPolicyMiddleware) +app.add_middleware(RateLimitMiddleware) app.add_middleware(CORSMiddleware, allow_origins=["*"], allow_methods=["*"], allow_headers=["*"]) app.include_router(auth.router)