react: check browser profiling organization flag on react render

src/sentry/web/frontend/react_page.py

@@ -1,5 +1,6 @@
 from fnmatch import fnmatch
 
+import sentry_sdk
 from django.conf import settings
 from django.contrib.auth.models import AnonymousUser
 from django.http import HttpResponse, HttpResponseRedirect
@@ -90,8 +91,16 @@ def handle_react(self, request: Request, **kwargs) -> HttpResponse:
                             return HttpResponseRedirect(redirect_url)
 
         response = render_to_response("sentry/base-react.html", context=context, request=request)
-        if "x-sentry-browser-profiling" in request.headers:
-            response["Document-Policy"] = "js-profiling"
+
+        try:
+            if "x-sentry-browser-profiling" in request.headers or (
+                getattr(request, "organization", None) is not None
+                and features.has("organizations:profiling-browser", request.organization)
+            ):
+                response["Document-Policy"] = "js-profiling"
+        except Exception as error:
+            sentry_sdk.capture_exception(error)
+
         return response
 
 

tests/sentry/web/frontend/test_react_page.py

@@ -338,3 +338,30 @@ def test_customer_domain_org_deletion_in_progress(self):
                 ("http://testserver/organizations/new/", 302),
             ]
             assert "activeorg" not in self.client.session
+
+    def test_document_policy_header_when_flag_is_enabled(self):
+        org = self.create_organization(owner=self.user)
+
+        self.login_as(self.user)
+
+        with self.feature({"organizations:profiling-browser": [org.slug]}):
+            response = self.client.get(
+                "/issues/",
+                SERVER_NAME=f"{org.slug}.testserver",
+                follow=True,
+            )
+            assert response.status_code == 200
+            assert response.headers["Document-Policy"] == "js-profiling"
+
+    def test_document_policy_header_when_flag_is_disabled(self):
+        org = self.create_organization(owner=self.user)
+
+        self.login_as(self.user)
+
+        response = self.client.get(
+            "/issues/",
+            SERVER_NAME=f"{org.slug}.testserver",
+            follow=True,
+        )
+        assert response.status_code == 200
+        assert "Document-Policy" not in response.headers