o h@s0dZddlmZddlmZGdddeZdS)z Clickjacking Protection Middleware. This module provides a middleware that implements protection against a malicious site loading resources from your site in a hidden frame. )settings)MiddlewareMixinc@s eZdZdZddZddZdS)XFrameOptionsMiddlewarea Set the X-Frame-Options HTTP header in HTTP responses. Do not set the header if it's already set or if the response contains a xframe_options_exempt value set to True. By default, set the X-Frame-Options header to 'DENY', meaning the response cannot be displayed in a frame, regardless of the site attempting to do so. To enable the response to be loaded on a frame within the same site, set X_FRAME_OPTIONS in your project's Django settings to 'SAMEORIGIN'. cCs8|ddur |St|ddr|S||||jd<|S)NzX-Frame-Optionsxframe_options_exemptF)getgetattrget_xframe_options_valueheadersselfrequestresponser`/var/www/html/optinet_system/venv/lib/python3.10/site-packages/django/middleware/clickjacking.pyprocess_responses  z(XFrameOptionsMiddleware.process_responsecCsttddS)a Get the value to set for the X_FRAME_OPTIONS header. Use the value from the X_FRAME_OPTIONS setting, or 'DENY' if not set. This method can be overridden if needed, allowing it to vary based on the request or response. X_FRAME_OPTIONSDENY)rrupperr rrrr(sz0XFrameOptionsMiddleware.get_xframe_options_valueN)__name__ __module__ __qualname____doc__rrrrrrr s rN)r django.confrdjango.utils.deprecationrrrrrrs