From d77fe53b69ec7171fa0988ee13907ff53e9a7266 Mon Sep 17 00:00:00 2001 From: ray Date: Thu, 6 Jul 2023 11:24:21 +0100 Subject: [PATCH] Allowing EDX to be embedded in itself --- lms/envs/common.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lms/envs/common.py b/lms/envs/common.py index 1f92b6f221..b5d05c9202 100644 --- a/lms/envs/common.py +++ b/lms/envs/common.py @@ -1590,7 +1590,7 @@ def _make_locale_paths(settings): # pylint: disable=missing-function-docstring ] # Clickjacking protection can be disbaled by setting this to 'ALLOW' -X_FRAME_OPTIONS = 'DENY' +X_FRAME_OPTIONS = 'SAMEORIGIN' # Platform for Privacy Preferences header P3P_HEADER = 'CP="Open EdX does not have a P3P policy."'