set X-Frame-Options to SAMEORIGIN by default, resolves #51

2021-02-17 22:25:13 +11:00
parent 3567e20600
commit 647254d7f7
1 changed files with 3 additions and 0 deletions
--- a/tubesync/tubesync/settings.py
+++ b/tubesync/tubesync/settings.py
@@ -114,6 +114,9 @@ Disallow: /
 '''.strip()


+X_FRAME_OPTIONS = 'SAMEORIGIN'
+
+
 HEALTHCHECK_FIREWALL = True
 HEALTHCHECK_ALLOWED_IPS = ('127.0.0.1',)