Fixed #24896 -- Doc'd clickjacking protection doesn't overwrite X-Frame-Options header.

0b5fb8e7 · Simeon J Morgan · Tim Graham · 44f3ee77 · 0b5fb8e7
Kaydet (Commit) 0b5fb8e7 authored Haz 02, 2015 tarafından Simeon J Morgan Kaydeden (comit) Tim Graham Haz 02, 2015
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

clickjacking.txt docs/ref/clickjacking.txt +3 -0

No files found.
--- a/docs/ref/clickjacking.txt
+++ b/docs/ref/clickjacking.txt
@@ -45,6 +45,9 @@ site:
 2. A set of view decorators that can be used to override the middleware or to
   only set the header for certain views.

+The ``X-Frame-Options`` HTTP header will only be set by the middleware or view
+decorators if it is not already present in the response.
+
 How to use it
 =============