fix xframe_options_sameorigin in MergeView (#1294)

django-wiki · Jun 12, 2023 · 46485dd · 46485dd
1 parent fed9491
commit 46485dd
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/wiki/views/article.py b/src/wiki/views/article.py
@@ -910,6 +910,7 @@ class MergeView(View):
     template_error_name = "wiki/error.html"
     urlpath = None
 
+    @method_decorator(xframe_options_sameorigin)
     @method_decorator(get_article(can_write=True))
     def dispatch(self, request, article, revision_id, *args, **kwargs):
         return super().dispatch(request, article, revision_id, *args, **kwargs)