django/clickjacking.py at main · django/django · GitHub
github.com › django › djangoresponse from being loaded in a frame in any site, set X_FRAME_OPTIONS in: your project's Django settings to 'DENY'. """ def process_response (self, request, response): # Don't set it if it's already in the response: if response. get ('X-Frame-Options') is not None: return response # Don't set it if they used @xframe_options_exempt: if getattr ...