# HG changeset patch # User Brian Neal # Date 1336244776 18000 # Node ID acfa5162d72f3c30757114273a48e896776108b6 # Parent ddd69a8e07c76497411511a4a82cfc10c8269476 For Django 1.4, add clickjacking protection via new middleware. diff -r ddd69a8e07c7 -r acfa5162d72f gpp/settings/base.py --- a/gpp/settings/base.py Thu May 03 20:45:16 2012 -0500 +++ b/gpp/settings/base.py Sat May 05 14:06:16 2012 -0500 @@ -74,6 +74,7 @@ 'django.contrib.sessions.middleware.SessionMiddleware', 'django.contrib.messages.middleware.MessageMiddleware', 'django.contrib.auth.middleware.AuthenticationMiddleware', + 'django.middleware.clickjacking.XFrameOptionsMiddleware', 'gpp.core.middleware.InactiveUserMiddleware', 'gpp.core.middleware.WhosOnline', 'django.contrib.flatpages.middleware.FlatpageFallbackMiddleware',