๎ ชอXะใ@sHddlmZddlmZdd„Zdd„Zdd„Zd S) ้)ฺwraps)ฺavailable_attrscs.‡fdd†}tˆdtˆƒƒ|ƒS)z๖ Modifies a view function so its response has the X-Frame-Options HTTP header set to 'DENY' as long as the response doesn't already have that header set. e.g. @xframe_options_deny def some_view(request): ... cs5ˆ||Ž}|jdƒdkr1d|d.wrapped_viewฺassigned)rr)rr r )rr ฺxframe_options_denys r cs.‡fdd†}tˆdtˆƒƒ|ƒS)a Modifies a view function so its response has the X-Frame-Options HTTP header set to 'SAMEORIGIN' as long as the response doesn't already have that header set. e.g. @xframe_options_sameorigin def some_view(request): ... cs5ˆ||Ž}|jdƒdkr1d|d.wrapped_viewr )rr)rr r )rr ฺxframe_options_sameorigins rcs.‡fdd†}tˆdtˆƒƒ|ƒS)zๆ Modifies a view function by setting a response variable that instructs XFrameOptionsMiddleware to NOT set the X-Frame-Options HTTP header. e.g. @xframe_options_exempt def some_view(request): ... csˆ||Ž}d|_|S)NT)ฺxframe_options_exempt)rrr)rr r r 9s z+xframe_options_exempt..wrapped_viewr )rr)rr r )rr r.s rN)ฺ functoolsrZdjango.utils.decoratorsrr rrr r r r ฺs