1
0
mirror of https://github.com/django/django.git synced 2024-12-22 17:16:24 +00:00

Fixed #30732 -- Doc'd that SameSite cookies flags can affect xframe_options_exempt.

This commit is contained in:
Jezeniel Zapanta 2019-09-16 18:13:06 +08:00 committed by Mariusz Felisiak
parent f97bbad908
commit e8ad265ac8

View File

@ -88,6 +88,11 @@ that tells the middleware not to set the header::
def ok_to_load_in_a_frame(request):
return HttpResponse("This page is safe to load in a frame on any site.")
.. note::
If you want to submit a form or access a session cookie within a frame or
iframe, you may need to modify the :setting:`CSRF_COOKIE_SAMESITE` or
:setting:`SESSION_COOKIE_SAMESITE` settings.
Setting ``X-Frame-Options`` per view
------------------------------------