changeset 575:acfa5162d72f

For Django 1.4, add clickjacking protection via new middleware.
author Brian Neal <bgneal@gmail.com>
date Sat, 05 May 2012 14:06:16 -0500
parents ddd69a8e07c7
children 6301dd73683f
files gpp/settings/base.py
diffstat 1 files changed, 1 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/gpp/settings/base.py	Thu May 03 20:45:16 2012 -0500
+++ b/gpp/settings/base.py	Sat May 05 14:06:16 2012 -0500
@@ -74,6 +74,7 @@
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.contrib.messages.middleware.MessageMiddleware',
     'django.contrib.auth.middleware.AuthenticationMiddleware',
+    'django.middleware.clickjacking.XFrameOptionsMiddleware',
     'gpp.core.middleware.InactiveUserMiddleware',
     'gpp.core.middleware.WhosOnline',
     'django.contrib.flatpages.middleware.FlatpageFallbackMiddleware',