{{response.headers['Content-Security-Policy'] = "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data:; frame-src 'none'; object-src 'none'; base-uri 'none'; frame-ancestors 'self'"}} {{response.headers['X-Content-Type-Options'] = 'nosniff'}} {{try: reader_config except NameError: reader_config = dict(content_url=URL('tree', 'wiki_content', extension=False, vars=dict(request.vars))) pass}}