# HG changeset patch # User durandn # Date 1475576752 -7200 # Node ID 04ff6ca2a3aade2669b1b579b590331c05e20b14 # Parent 75bcec4a03cdf1fb32a13f49302cc94b575a6cb7 added exempt xframe header for renkan edit, create and display views. diff -r 75bcec4a03cd -r 04ff6ca2a3aa server/src/metaeducation/views/renkan.py --- a/server/src/metaeducation/views/renkan.py Tue Oct 04 12:24:54 2016 +0200 +++ b/server/src/metaeducation/views/renkan.py Tue Oct 04 12:25:52 2016 +0200 @@ -6,6 +6,8 @@ from django.http import HttpResponse, HttpResponseRedirect from django.shortcuts import render, get_object_or_404 from django.views.generic import TemplateView, View +from django.utils.decorators import method_decorator +from django.views.decorators.clickjacking import xframe_options_exempt from renkanmanager.api.views import RenkanDetail from renkanmanager.models import Renkan @@ -16,6 +18,7 @@ logger = logging.getLogger(__name__) + class ListRenkansView(View): template_name = "renkan_list.html" @@ -33,6 +36,7 @@ serializer.save(creator=request.user) return HttpResponseRedirect(request.META.get('HTTP_REFERER', settings.BASE_URL)) +@method_decorator(xframe_options_exempt, name="dispatch") class NewRenkanView(View): def get(self, request): @@ -44,7 +48,7 @@ new_renkan = serializer.save(creator=request.user) return HttpResponseRedirect(reverse("front_edit_renkan", kwargs={"renkan_guid": new_renkan.renkan_guid})) - +@method_decorator(xframe_options_exempt, name="dispatch") class ViewRenkanView(TemplateView): template_name = "renkan_view.html" def get_context_data(self, **kwargs): @@ -61,6 +65,7 @@ +@method_decorator(xframe_options_exempt, name="dispatch") class EditRenkanView(TemplateView): template_name = "renkan_edit.html" def get_context_data(self, **kwargs):