← Back
Editing: clickjacking.cpython-311.pyc
� �|�e� � �> � d Z ddlmZ ddlmZ G d� de� � ZdS )z� Clickjacking Protection Middleware. This module provides a middleware that implements protection against a malicious site loading resources from your site in a hidden frame. � )�settings)�MiddlewareMixinc � � e Zd ZdZd� Zd� ZdS )�XFrameOptionsMiddlewarea� Set the X-Frame-Options HTTP header in HTTP responses. Do not set the header if it's already set or if the response contains a xframe_options_exempt value set to True. By default, set the X-Frame-Options header to 'SAMEORIGIN', meaning the response can only be loaded on a frame within the same site. To prevent the response from being loaded in a frame in any site, set X_FRAME_OPTIONS in your project's Django settings to 'DENY'. c � � |� d� � �|S t |dd� � r|S | � ||� � |j d< |S )NzX-Frame-Options�xframe_options_exemptF)�get�getattr�get_xframe_options_value�headers��self�request�responses �@/usr/lib/python3/dist-packages/django/middleware/clickjacking.py�process_responsez(XFrameOptionsMiddleware.process_response sa � � �<�<�)� *� *� 6��O� �8� 4�e� <� <� ��O�.2�.K�.K� � �/ � / ���*�+� �� c �R � t t dd� � � � � S )a Get the value to set for the X_FRAME_OPTIONS header. Use the value from the X_FRAME_OPTIONS setting, or 'DENY' if not set. This method can be overridden if needed, allowing it to vary based on the request or response. �X_FRAME_OPTIONS�DENY)r r �upperr s r r z0XFrameOptionsMiddleware.get_xframe_options_value' s# � � �x�!2�F�;�;�A�A�C�C�Cr N)�__name__� __module__� __qualname__�__doc__r r � r r r r sA � � � � � � � � � � � D� D� D� D� Dr r N)r � django.confr �django.utils.deprecationr r r r r �<module>r ss ��� � !� � � � � � 4� 4� 4� 4� 4� 4�#D� #D� #D� #D� #D�o� #D� #D� #D� #D� #Dr
Save File
Cancel