fix(settings): do not remove clickjacking MIDDLEWARE

Keep `MIDDLEWARE` inherited from apis-acdhch-default-settings as-is to be able to confirm effectiveness of updated CSP settings. Fixes: #107
acdh-oeaw · Feb 4, 2025 · d13d52d · d13d52d
1 parent fca7e94
commit d13d52d
Showing 1 changed file with 0 additions and 3 deletions.
diff --git a/apis_ontology/settings.py b/apis_ontology/settings.py
@@ -12,9 +12,6 @@
 INSTALLED_APPS = ["apis_core.relations"] + INSTALLED_APPS
 INSTALLED_APPS += ["apis_core.documentation"]
 
-if "django.middleware.clickjacking.XFrameOptionsMiddleware" in MIDDLEWARE:
-    MIDDLEWARE.remove("django.middleware.clickjacking.XFrameOptionsMiddleware")
-
 
 # Content Security Policy settings
 # TODO remove variable once it has been added to apis-acdhch-default-settings