Update.

src/snek/system/middleware.py

@@ -24,6 +24,7 @@ def generate_nonce():
 
 @web.middleware
 async def csp_middleware(request, handler):
+    return response
     response = await handler(request)
     nonce = generate_nonce()
     response.headers['Content-Security-Policy'] = csp_policy.format(nonce=nonce)