search

devilry / trix2

Next generation Trix. Detailed task control and statistics app for better learning outcome.
BSD 3-Clause "New" or "Revised" License
2 stars 3 forks source link

Remove obsolete middleware #144

Closed torgeirl closed 7 months ago

torgeirl commented 7 months ago

There are two instances of django.middleware.clickjacking.XFrameOptionsMiddleware in trix/project/default/settings.py; judging from Django's documentation the first instance (line 66) should be removed.

Edit: we actually want to remove both instances django.middleware.clickjacking.XFrameOptionsMiddleware since its inclusion trumps the changes in #140; from the documentation:

By default, the middleware will set the X-Frame-Options header to DENY for every outgoing HttpResponse.

Levijatan commented 7 months ago

Removed in 259e517