o

�a��@s0dZd
dl
mZ
d
dlmZ
Gdd�de�ZdS)z�
Clickjacking Protection Middleware.

This module provides a middleware that implements protection against a
malicious site loading resources from your site in a hidden frame.
�)
�settings)
�MiddlewareMixinc@s eZ
dZd
Zdd�Zdd�ZdS)�XFrameOptionsMiddlewarea�

    Set the X-Frame-Options HTTP header in HTTP responses.

    Do not set the header if it's already set or if the response contains
    a xframe_options_exempt value set to True.

    By default, set the X-Frame-Options header to 'SAMEORIGIN', meaning the
    response can only be loaded on a frame within the same site. To prevent the
    response from being loaded in a frame in any site, set X_FRAME_OPTIONS in
    your project's Django settings to 'DENY'.
    cCs8|�d
�
du
r	|St
|dd�r|S|�|
|�|jd
<|S)NzX-Frame-Options�xframe_options_exemptF)�get�getattr�get_xframe_options_value�headers��self�request�response�r�@/usr/lib/python3/dist-packages/django/middleware/clickjacking.py�process_responses




�z(XFrameOptionsMiddleware.process_responsecCstt
d
d���S)a

        Get the value to set for the X_FRAME_OPTIONS header. Use the value from
        the X_FRAME_OPTIONS setting, or 'DENY' if not set.

        This method can be overridden if needed, allowing it to vary based on
        the request or response.
        �X_FRAME_OPTIONS�DENY)rr�upperr
rrrr'sz0XFrameOptionsMiddleware.get_xframe_options_valueN)�__name__�
__module__�__qualname__�__doc__rrrrrrrs
rN)r�django.confr�django.utils.deprecationrrrrrr�<module>
s