Keith SmithandClaude Sonnet 4.5 123d6af430 Update middleware to ADD security headers for browsers ...

Middleware now:
- Detects mobile app vs browser via User-Agent
- Mobile app: Removes frame-blocking headers (allows iframe)
- Browsers: Adds CSP and X-Frame-Options headers (security)

This ensures:
✓ Browsers get full CSP protection
✓ Mobile app can embed content
✓ No need for django-csp package
✓ All security managed in one place

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

2025-12-26 22:29:00 -07:00

..

__init__.py

Add middleware to allow mobile app iframe embedding

2025-12-26 22:08:05 -07:00

mobile_app.py

Update middleware to ADD security headers for browsers

2025-12-26 22:29:00 -07:00