Class XFrameOptionsMiddleware

django.middleware.clickjacking.XFrameOptionsMiddleware

Set the X-Frame-Options HTTP header in HTTP responses.

Declaration

class XFrameOptionsMiddleware(MiddlewareMixin)

Documentation

Do not set the header if it's already set or if the response contains
a xframe_options_exempt value set to True.

By default, set the X-Frame-Options header to 'SAMEORIGIN', meaning the
response can only be loaded on a frame within the same site. To prevent the
response from being loaded in a frame in any site, set X_FRAME_OPTIONS in
your project's Django settings to 'DENY'.

Methods

▶ def get_xframe_options_value(self, request, response)
Get the value to set for the X_FRAME_OPTIONS header. Use the value from the X_FRAME_OPTIONS setting, or 'DENY' if not set.
source link
```
This method can be overridden if needed, allowing it to vary based on
the request or response.
```
▷ def process_response(self, request, response)
source link

Inherited methods

Methods inherited from django.utils.deprecation.MiddlewareMixin:
__call__, __init__