twaldear / flask-secure-headers

Secure Header Wrapper for Flask Applications
MIT License
18 stars 10 forks source link

Does this supersede flask-csp? #5

Open toolness opened 8 years ago

toolness commented 8 years ago

Hey, I was just comparing this library against flask-csp and finally realized that they're by the same person!

Out of curiosity, is flask-secure-headers meant to supersede flask-csp?

twaldear commented 8 years ago

Hey Atul,

For the most part yes. flask-csp stores default values in a json file so it wouldn't be great for running multiple apps with different settings in the same python environment. For flask-secure-headers I changed that to store default values in an object and I just figured there was no reason to fix flask-csp because flask-secure-headers has the same csp functionality plus several additional security headers.

-Tristan

toolness commented 8 years ago

Cool, thanks Tristan!