Adding support for X-Frame-Options
Closed this issue · 1 comments
scicco commented
Hello,
Is possible to add the following two configurations to allow different values for X-Frame-Options
, other than SAMEORIGIN
:
example:
WTF_CSRF_FRAME_OPTIONS = 'ALLOW-FROM'
and
WTF_CSRF_FRAME_OPTIONS_ALLOW_FROM = 'mydomain.site'
which will produce the following header:
'X-Frame-Options': 'ALLOW-FROM mydomain.site'
I've checked on documentation and previous issues but, unfortunately, I didn't find any way to do it.
Thank you
scicco commented
closing this, that header is not set inside this library, I'm sorry for the confusion 😅