#24896: Clickjacking doc doesn't specify middleware/view decorator behaviour
when X
-Frame-Options header is already set.
----------------------------------+----------------------------
Reporter: wsot | Owner: nobody
Type: Cleanup/optimization | Status: closed
Component: Documentation | Version: 1.8
Severity: Normal | Resolution: fixed
Keywords: | Triage Stage: Unreviewed
Has patch: 0 | Easy pickings: 0
UI/UX: 0 |
----------------------------------+----------------------------
Comment (by Tim Graham <timograham@…>):
In [changeset:"3b41850adcce29b0c2e64d9c6f3d34ffcc7d750b" 3b41850]:
{{{
#!CommitTicketReference repository=""
revision="3b41850adcce29b0c2e64d9c6f3d34ffcc7d750b"
[1.8.x] Fixed #24896 -- Doc'd clickjacking protection doesn't overwrite X
-Frame-Options header.
Backport of 0b5fb8e72c74e41d250f35c8c3df3f3a13d367f3 from master
}}}
--
Ticket URL: <https://code.djangoproject.com/ticket/24896#comment:2>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/062.62e03c606e785f8807325d491c7ef5e5%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.
