27 lines
2.1 KiB
Plaintext
27 lines
2.1 KiB
Plaintext
|
<EFBFBD>
|
|||
|
|
j<>
i<> <00> <00>6 <00> d Z ddlmZ ddlmZ G d<04> de<04> Zy)z<>
|
|||
|
|
Clickjacking Protection Middleware.
|
|||
|
|
|
|||
|
|
This module provides a middleware that implements protection against a
|
|||
|
|
malicious site loading resources from your site in a hidden frame.
|
|||
|
|
<EFBFBD> )<01>settings)<01>MiddlewareMixinc <00> <00> e Zd ZdZd<02> Zd<03> Zy)<05>XFrameOptionsMiddlewarea<65>
|
|||
|
|
Set the X-Frame-Options HTTP header in HTTP responses.
|
|||
|
|
|
|||
|
|
Do not set the header if it's already set or if the response contains
|
|||
|
|
a xframe_options_exempt value set to True.
|
|||
|
|
|
|||
|
|
By default, set the X-Frame-Options header to 'DENY', meaning the response
|
|||
|
|
cannot be displayed in a frame, regardless of the site attempting to do so.
|
|||
|
|
To enable the response to be loaded on a frame within the same site, set
|
|||
|
|
X_FRAME_OPTIONS in your project's Django settings to 'SAMEORIGIN'.
|
|||
|
|
c <00><> <00> |j d<01> <00>|S t |dd<03> r|S | j ||<02> |j d< |S )NzX-Frame-Options<6E>xframe_options_exemptF)<04>get<65>getattr<74>get_xframe_options_value<75>headers<72><03>self<6C>request<73>responses <20>ME:\Project\pygoedge\.venv\Lib\site-packages\django/middleware/clickjacking.py<70>process_responsez(XFrameOptionsMiddleware.process_response sT <00> <00> <13><<3C><<3C>)<29> *<2A> 6<><1B>O<EFBFBD> <13>8<EFBFBD> 4<>e<EFBFBD> <<3C><1B>O<EFBFBD>.2<EFBFBD>.K<>.K<> <13> <14>/
|
|||
|
|
<EFBFBD><08><18><18>*<2A>+<2B> <18><0F> c <00>@ <00> t t dd<02> j <00> S )a
|
|||
|
|
Get the value to set for the X_FRAME_OPTIONS header. Use the value from
|
|||
|
|
the X_FRAME_OPTIONS setting, or 'DENY' if not set.
|
|||
|
|
|
|||
|
|
This method can be overridden if needed, allowing it to vary based on
|
|||
|
|
the request or response.
|
|||
|
|
<20>X_FRAME_OPTIONS<4E>DENY)r
|
|||
|
|
r <00>upperr
s r r z0XFrameOptionsMiddleware.get_xframe_options_value( s <00> <00> <17>x<EFBFBD>!2<>F<EFBFBD>;<3B>A<>A<>C<>Cr N)<06>__name__<5F>
|
|||
|
|
__module__<EFBFBD> __qualname__<5F>__doc__r r <00> r r r r s <00> <00>
|
|||
|
|
<08>
<18> Dr r N)r <00> django.confr <00>django.utils.deprecationr r r r r <00><module>r s <00><01><04> !<21> 4<>$D<01>o<EFBFBD> $Dr
|