63 lines
1.5 KiB
Python
63 lines
1.5 KiB
Python
from functools import wraps
|
|
|
|
|
|
def xframe_options_deny(view_func):
|
|
"""
|
|
Modify a view function so its response has the X-Frame-Options HTTP
|
|
header set to 'DENY' as long as the response doesn't already have that
|
|
header set. Usage:
|
|
|
|
@xframe_options_deny
|
|
def some_view(request):
|
|
...
|
|
"""
|
|
|
|
@wraps(view_func)
|
|
def wrapper_view(*args, **kwargs):
|
|
resp = view_func(*args, **kwargs)
|
|
if resp.get("X-Frame-Options") is None:
|
|
resp["X-Frame-Options"] = "DENY"
|
|
return resp
|
|
|
|
return wrapper_view
|
|
|
|
|
|
def xframe_options_sameorigin(view_func):
|
|
"""
|
|
Modify a view function so its response has the X-Frame-Options HTTP
|
|
header set to 'SAMEORIGIN' as long as the response doesn't already have
|
|
that header set. Usage:
|
|
|
|
@xframe_options_sameorigin
|
|
def some_view(request):
|
|
...
|
|
"""
|
|
|
|
@wraps(view_func)
|
|
def wrapper_view(*args, **kwargs):
|
|
resp = view_func(*args, **kwargs)
|
|
if resp.get("X-Frame-Options") is None:
|
|
resp["X-Frame-Options"] = "SAMEORIGIN"
|
|
return resp
|
|
|
|
return wrapper_view
|
|
|
|
|
|
def xframe_options_exempt(view_func):
|
|
"""
|
|
Modify a view function by setting a response variable that instructs
|
|
XFrameOptionsMiddleware to NOT set the X-Frame-Options HTTP header. Usage:
|
|
|
|
@xframe_options_exempt
|
|
def some_view(request):
|
|
...
|
|
"""
|
|
|
|
@wraps(view_func)
|
|
def wrapper_view(*args, **kwargs):
|
|
resp = view_func(*args, **kwargs)
|
|
resp.xframe_options_exempt = True
|
|
return resp
|
|
|
|
return wrapper_view
|