Thanks Benjamin.

I found a couple sites that successfully launched without chrome error.

I take it x-frame exempt, is not for embedding as expected.

On Tue, Nov 2, 2021 at 9:44 AM bnmng <benja...@bnmng.com> wrote:

> I think the problem here is Google doesn't want to be embedded and there
> isn't much you can do about it.  If you can test it by replacing Google's
> URL with another one that works, then I think you proved your code is
> good.
>
> On Monday, November 1, 2021 at 8:53:52 AM UTC-4 greenk...@gmail.com wrote:
>
>> Hi,
>>
>> I am having issues with X-frame options exempt.  I keep getting the same
>> chrome error:
>>
>> “Refused to display 'https://www.google.com/' in a frame because it set
>> 'X-Frame-Options' to 'sameorigin'.”
>>
>> In my application I have performed the following combination of actions
>> and still have the error :
>>
>>    1. Removed X-frame middleware setting:
>>    2. Changed X-frame Options:
>>    3. Utilized decorator @xframe_options_exempt
>>    4. Although I am looking to use this in a template, I also tested
>>    Iframe directly in HTTPResponse
>>
>>
>> *Settings.py*
>>
>> MIDDLEWARE = [
>>     'django.middleware.security.SecurityMiddleware',
>>     'django.contrib.sessions.middleware.SessionMiddleware',
>>     'django.middleware.common.CommonMiddleware',
>>     'django.middleware.csrf.CsrfViewMiddleware',
>>     'django.contrib.auth.middleware.AuthenticationMiddleware',
>>     'django.contrib.messages.middleware.MessageMiddleware',
>>
>> ]
>>
>> X_FRAME_OPTIONS = 'ALLOWALL'
>>
>>
>>
>> *Views.py*
>>
>> from django.shortcuts import render
>> from django.http import HttpResponse
>> from django.views.decorators.clickjacking import xframe_options_exempt
>>
>> @xframe_options_exempt
>> def index(request):
>>     return HttpResponse('<div id = "sourceframe"><iframe id = "4" src = "
>> https://www.google.com/"; width = "100%" height = "100%"></iframe></div>')
>>
> --
> You received this message because you are subscribed to the Google Groups
> "Django users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to django-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/django-users/8f4861ae-9441-4dec-a7da-92f2e18a3ca6n%40googlegroups.com
> <https://groups.google.com/d/msgid/django-users/8f4861ae-9441-4dec-a7da-92f2e18a3ca6n%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/CAOn6WPaGuowO7jt0S7KhiqMYmUgzBvoR9-Fbcu5NCpHq%3D_At5w%40mail.gmail.com.

Reply via email to