Adding X-FRAME-OPTIONS setting to allow self-embed for reverse proxy

spacetelescope · Nov 25, 2024 · ee85845 · ee85845
1 parent 36f6cdd
commit ee85845
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/jwql/website/jwql_proj/settings.py b/jwql/website/jwql_proj/settings.py
@@ -40,6 +40,8 @@
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = get_config()['django_debug']
 
+X_FRAME_OPTIONS = "SAMEORIGIN"
+
 ALLOWED_HOSTS = ['*']
 
 # Application definition