#24896: Clickjacking doc doesn't specify middleware/view decorator behaviour
when X
-Frame-Options header is already set.
--------------------------------------+--------------------
Reporter: wsot | Owner: nobody
Type: Cleanup/optimization | Status: new
Component: Documentation | Version: 1.8
Severity: Normal | Keywords:
Triage Stage: Unreviewed | Has patch: 0
Easy pickings: 0 | UI/UX: 0
--------------------------------------+--------------------
On the page https://docs.djangoproject.com/en/1.8/ref/clickjacking/ it is
not specified what the behaviour of the view decorators and middleware is
when the X-Frame-Options HTTP header is already present.
(The behaviour is that if the header is already present, it is left
unmodified)
--
Ticket URL: <https://code.djangoproject.com/ticket/24896>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/047.fea1c7b3b7802f38c3b70c2c7a6c7f90%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.
