mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-10-23 21:59:11 +00:00
Code Issues 32 Releases Wiki Activity

[1.8.x] Fixed #24896 -- Doc'd clickjacking protection doesn't overwrite X-Frame-Options header.

Browse Source 
Backport of 0b5fb8e72c from master
This commit is contained in:
Simeon J Morgan
2015-06-02 14:11:01 +10:00
committed by Tim Graham
parent aefa3a6a03
commit 3b41850adc
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
docs/ref/clickjacking.txt
View File

@@ -45,6 +45,9 @@ site:
2. A set of view decorators that can be used to override the middleware or to
only set the header for certain views.
The ``X-Frame-Options`` HTTP header will only be set by the middleware or view
decorators if it is not already present in the response.
How to use it
=============