added exempt xframe header for renkan edit, create and display views.
authordurandn
Tue, 04 Oct 2016 12:25:52 +0200
changeset 116 04ff6ca2a3aa
parent 115 75bcec4a03cd
child 117 f00cec012ea2
added exempt xframe header for renkan edit, create and display views.
server/src/metaeducation/views/renkan.py
--- a/server/src/metaeducation/views/renkan.py	Tue Oct 04 12:24:54 2016 +0200
+++ b/server/src/metaeducation/views/renkan.py	Tue Oct 04 12:25:52 2016 +0200
@@ -6,6 +6,8 @@
 from django.http import HttpResponse, HttpResponseRedirect
 from django.shortcuts import render, get_object_or_404
 from django.views.generic import TemplateView, View
+from django.utils.decorators import method_decorator
+from django.views.decorators.clickjacking import xframe_options_exempt
 
 from renkanmanager.api.views import RenkanDetail
 from renkanmanager.models import Renkan
@@ -16,6 +18,7 @@
 
 logger = logging.getLogger(__name__)
 
+
 class ListRenkansView(View):
     template_name = "renkan_list.html"
 
@@ -33,6 +36,7 @@
             serializer.save(creator=request.user)
         return HttpResponseRedirect(request.META.get('HTTP_REFERER', settings.BASE_URL))
 
+@method_decorator(xframe_options_exempt, name="dispatch")
 class NewRenkanView(View):
 
     def get(self, request):
@@ -44,7 +48,7 @@
             new_renkan = serializer.save(creator=request.user)
             return HttpResponseRedirect(reverse("front_edit_renkan", kwargs={"renkan_guid": new_renkan.renkan_guid}))
 
-
+@method_decorator(xframe_options_exempt, name="dispatch")
 class ViewRenkanView(TemplateView):
     template_name = "renkan_view.html"
     def get_context_data(self, **kwargs):
@@ -61,6 +65,7 @@
 
 
 
+@method_decorator(xframe_options_exempt, name="dispatch")
 class EditRenkanView(TemplateView):
     template_name = "renkan_edit.html"
     def get_context_data(self, **kwargs):