OwlCyberSecurity - MANAGER
Edit File: clickjacking.cpython-39.pyc
a kH�f� � @ s0 d Z ddlmZ ddlmZ G dd� de�ZdS )z� Clickjacking Protection Middleware. This module provides a middleware that implements protection against a malicious site loading resources from your site in a hidden frame. � )�settings)�MiddlewareMixinc @ s e Zd ZdZdd� Zdd� ZdS )�XFrameOptionsMiddlewarea� Set the X-Frame-Options HTTP header in HTTP responses. Do not set the header if it's already set or if the response contains a xframe_options_exempt value set to True. By default, set the X-Frame-Options header to 'DENY', meaning the response cannot be displayed in a frame, regardless of the site attempting to do so. To enable the response to be loaded on a frame within the same site, set X_FRAME_OPTIONS in your project's Django settings to 'SAMEORIGIN'. c C s8 |� d�d ur|S t|dd�r"|S | �||�|jd< |S )NzX-Frame-OptionsZxframe_options_exemptF)�get�getattr�get_xframe_options_value�headers��self�request�response� r �`/home/gouroczh/virtualenv/test/3.9/lib/python3.9/site-packages/django/middleware/clickjacking.py�process_response s � z(XFrameOptionsMiddleware.process_responsec C s t tdd��� S )a Get the value to set for the X_FRAME_OPTIONS header. Use the value from the X_FRAME_OPTIONS setting, or 'DENY' if not set. This method can be overridden if needed, allowing it to vary based on the request or response. ZX_FRAME_OPTIONSZDENY)r r �upperr r r r r ( s z0XFrameOptionsMiddleware.get_xframe_options_valueN)�__name__� __module__� __qualname__�__doc__r r r r r r r s r N)r Z django.confr Zdjango.utils.deprecationr r r r r r �<module> s