Merge pull request #45 from santoru/hotfix-csp

Fix AttributeError on CSP
santoru · May 6, 2024 · bbcbc11 · bbcbc11
2 parents 123fc89 + 045050c
commit bbcbc11
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/setup.py b/setup.py
@@ -20,7 +20,7 @@
 from setuptools import setup
 
 PACKAGE_NAME = "shcheck"
-VERSION = "1.6.2"
+VERSION = "1.6.3"
 
 with open("README.md", "r", encoding="utf-8") as fh:
     long_description = fh.read()

diff --git a/shcheck/shcheck.py b/shcheck/shcheck.py
@@ -321,7 +321,7 @@ def main():
         json_results["missing"] = []
 
         # Before parsing, remove X-Frame-Options if there's CSP with frame-ancestors directive
-        if "frame-ancestors" in headers.get('Content-Security-Policy'.lower()).lower():
+        if "Content-Security-Policy".lower() in str(headers).lower() and "frame-ancestors" in headers.get('Content-Security-Policy'.lower()).lower():
             sec_headers.pop("X-Frame-Options")
             headers.pop("X-Frame-Options".lower())