.

middleware/coep.py

@@ -0,0 +1,8 @@
+class COEPMiddleware:
+    def __init__(self, get_response):
+        self.get_response = get_response
+
+    def __call__(self, request):
+        response = self.get_response(request)
+        response['Cross-Origin-Embedder-Policy'] = 'require-corp'  # or 'credentialless'
+        return response

rad/settings.py

@@ -100,10 +100,14 @@ MIDDLEWARE = [
     "django.middleware.clickjacking.XFrameOptionsMiddleware",
     "reversion.middleware.RevisionMiddleware",
     "django_htmx.middleware.HtmxMiddleware",
-    'rad.middleware.coep.COEPMiddleware',
 
 ]
 
+if not DEBUG:
+    MIDDLEWARE = MIDDLEWARE.append(
+    'rad.middleware.coep.COEPMiddleware'
+    )
+
 ROOT_URLCONF = "rad.urls"
 
 #default_loaders = [