Force X_FRAME_OPTIONS in settings due to different Django 3.0 default (…

…#367)
nephila · Apr 25, 2020 · 917e7bf · 917e7bf
1 parent 02dde23
commit 917e7bf
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/djangocms_installer/django/__init__.py b/djangocms_installer/django/__init__.py
@@ -305,6 +305,7 @@ def _build_settings(config_data):
         )
     ))
 
+    text.append('X_FRAME_OPTIONS = \'SAMEORIGIN\'')
     text.append('CMS_PERMISSION = {0}'.format(vars.CMS_PERMISSION))
     text.append('CMS_PLACEHOLDER_CONF = {0}'.format(vars.CMS_PLACEHOLDER_CONF))
 

diff --git a/tests/django.py b/tests/django.py
@@ -624,3 +624,4 @@ def test_build_settings(self):
                     'USER': 'user'
                 }
             }''').strip() in settings)
+        self.assertTrue('X_FRAME_OPTIONS = \'SAMEORIGIN\'' in settings)