{"categories":[{"label":"Python Modules","url":"https://skillfed.io/packages/category/software-development-libraries-python-modules/6"}],"enrichment":{"capability":"Flask extension that automatically sets HTTP security headers to protect against common web vulnerabilities like XSS, clickjacking, and MIME sniffing.","skillfed_tags":["http-headers","flask-extension","web-security"],"use_cases":["Add HTTPS enforcement and HSTS headers to a Flask app without manual header management.","Protect against XSS attacks by applying a strict default Content Security Policy.","Prevent clickjacking by setting X-Frame-Options and other framing controls.","Secure session cookies automatically by marking them as secure, httponly, and samesite.","Customize security headers per-view to allow exceptions for specific endpoints."],"what_it_does":"Flask-Talisman is a lightweight Flask extension that wraps your application to automatically inject security-focused HTTP headers. It enforces HTTPS by default (unless debug mode is on), enables HTTP Strict Transport Security, sets secure session cookies, and applies a strict Content Security Policy to mitigate XSS attacks. It also prevents clickjacking via X-Frame-Options, disables MIME type sniffing, and controls referrer leakage.\n\nThe extension is designed to be drop-in: you instantiate it with your Flask app and it handles header injection on every response. Most settings are configurable\u2014you can adjust CSP rules, HSTS behavior, frame options, and cookie attributes to match your application's needs. The package has no runtime dependencies, making it lightweight to add to an existing Flask project.","worth_installing":"Yes, with conditions. Flask-Talisman is a straightforward, low-friction way to add essential security headers to Flask applications. It has no dependencies, installs cleanly, and is marked Production/Stable. However, the package is dormant\u2014last updated in August 2023\u2014so verify that its defaults and behavior align with current security best practices and your Flask version before deploying to production."},"id":"flask-talisman","links":{"html":"https://skillfed.io/packages/flask-talisman","md":"https://skillfed.io/packages/flask-talisman.md","pypi":"https://pypi.org/project/flask-talisman/"},"maintenance":{"status":"dormant"},"meta":{"latest_release":"2023-08-03","license_spdx":null,"license_treatment":"permissive","name":"flask-talisman","python_support":"unspecified","summary":"HTTP security headers for Flask."},"popularity":{"monthly_downloads":2478870,"position":3046,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"1.1.0"}