fixup! mozillaGH-36 Update middleware for multi-policy support

DylanYoung · May 25, 2022 · 2628ac4 · 2628ac4
1 parent 9fff323
commit 2628ac4
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/csp/middleware.py b/csp/middleware.py
@@ -70,7 +70,9 @@ def process_response(self, request, response):
                 headers[header].append(csp)
 
         for header, policies in headers.items():
-            response[header] = '; '.join(policies)
+            # Multiple policies are joined by a comma and should be treated by
+            # the browser as though they were delivered under multiple headers.
+            response[header] = ', '.join(policies)
         return response
 
     def build_policy(self, request, response):