diff --git a/src/snek/system/middleware.py b/src/snek/system/middleware.py
index 8285855..368e3ae 100644
--- a/src/snek/system/middleware.py
+++ b/src/snek/system/middleware.py
@@ -24,8 +24,9 @@ def generate_nonce():
 
 @web.middleware
 async def csp_middleware(request, handler):
-    return response
+
     response = await handler(request)
+    return response 
     nonce = generate_nonce()
     response.headers['Content-Security-Policy'] = csp_policy.format(nonce=nonce)
     return response