From 90612209f260a1c1e6e1cc3ea76d354b7e64e601 Mon Sep 17 00:00:00 2001
From: Ross <xkjq@ymail.com>
Date: Mon, 9 Jun 2025 12:13:43 +0100
Subject: [PATCH] .

---
 middleware/coep.py | 8 ++++++++
 rad/settings.py    | 6 +++++-
 2 files changed, 13 insertions(+), 1 deletion(-)
 create mode 100644 middleware/coep.py

diff --git a/middleware/coep.py b/middleware/coep.py
new file mode 100644
index 00000000..4171e03a
--- /dev/null
+++ b/middleware/coep.py
@@ -0,0 +1,8 @@
+class COEPMiddleware:
+    def __init__(self, get_response):
+        self.get_response = get_response
+
+    def __call__(self, request):
+        response = self.get_response(request)
+        response['Cross-Origin-Embedder-Policy'] = 'require-corp'  # or 'credentialless'
+        return response
\ No newline at end of file
diff --git a/rad/settings.py b/rad/settings.py
index 056f9d6e..904250a0 100644
--- a/rad/settings.py
+++ b/rad/settings.py
@@ -100,10 +100,14 @@ MIDDLEWARE = [
     "django.middleware.clickjacking.XFrameOptionsMiddleware",
     "reversion.middleware.RevisionMiddleware",
     "django_htmx.middleware.HtmxMiddleware",
-    'rad.middleware.coep.COEPMiddleware',
 
 ]
 
+if not DEBUG:
+    MIDDLEWARE = MIDDLEWARE.append(
+    'rad.middleware.coep.COEPMiddleware'
+    )
+
 ROOT_URLCONF = "rad.urls"
 
 #default_loaders = [