x-content-type-options: nosniff
x-frame-options: DENY
content-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self'; frame-ancestors 'none'
===
/workspace/bulkmailer/app/main.py:8:from starlette.middleware.base import BaseHTTPMiddleware
/workspace/bulkmailer/app/main.py:36:        response.headers.setdefault("Content-Security-Policy",
/workspace/bulkmailer/app/main.py:44:app.add_middleware(SecurityHeadersMiddleware)