From 629c24c06b893b220e4ac0c220aa27045393a4f3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mateusz=20Gruszczy=C5=84ski?=
 <mateusz.gruszczynski@firma.interia.pl>
Date: Wed, 6 Aug 2025 22:44:39 +0200
Subject: [PATCH] wylacz talisman jak wszystko wylaczone w konfigu

---
 app.py | 20 ++++++++++++++++----
 1 file changed, 16 insertions(+), 4 deletions(-)

diff --git a/app.py b/app.py
index 53efe8b..b3fa8e8 100644
--- a/app.py
+++ b/app.py
@@ -48,7 +48,7 @@ from sqlalchemy import func, extract, inspect, or_, case, text
 from sqlalchemy.orm import joinedload
 from collections import defaultdict, deque
 from functools import wraps
-from flask_talisman import Talisman
+# from flask_talisman import Talisman # import niżej pod warunkiem
 from flask_session import Session
 from types import SimpleNamespace
 from pdf2image import convert_from_bytes
@@ -91,9 +91,21 @@ referrer_policy = app.config.get("REFERRER_POLICY")
 if referrer_policy:
     talisman_kwargs["referrer_policy"] = referrer_policy
 
-talisman = Talisman(
-    app, session_cookie_secure=app.config["SESSION_COOKIE_SECURE"], **talisman_kwargs
-)
+# jak  naglowki wylaczone, nie ładuj talisman
+effective_headers = {k: v for k, v in talisman_kwargs.items() if v not in (None, False)}
+
+
+if effective_headers:
+    from flask_talisman import Talisman
+    talisman = Talisman(
+        app,
+        session_cookie_secure=app.config.get("SESSION_COOKIE_SECURE", True),
+        **talisman_kwargs
+    )
+    print("[TALISMAN] Włączony z nagłówkami:", list(effective_headers.keys()))
+else:
+    print("[TALISMAN] Pominięty — wszystkie nagłówki security wyłączone.")
+
 
 register_heif_opener()  # pillow_heif dla HEIC
 SQLALCHEMY_ECHO = True