carljm/django-secure — Issue #16: the check_frame_deny check should pass if Django's new X_FRAME_OPTIONS setting is set to DENY and the XFrameOptions middleware is installed
Author: carljm
Created: 2012-02-23 17:01:56+00:00
State: open

If X_FRAME_OPTIONS is SAMEORIGIN, I think we should still warn that DENY is better unless you know that your site needs frames internally.