secure

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more). Maintained by TypeError on GitHub, where it has earned 1,047 stars from the community.

It's actively developed around asgi, content-security-policy, django, and is a solid reference for anyone building with these tools.