Source file `middleware_clickjacking.ml`

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
(* TODO Set the X-Frame-Options HTTP header in HTTP responses. Do not set the header if
   it's already set or if the response contains a xframe_options_exempt value set to True.
   By default, set the X-Frame-Options header to 'SAMEORIGIN', meaning the response can
   only be loaded on a frame within the same site. To prevent the response from being
   loaded in a frame in any site, set X_FRAME_OPTIONS in your project's Django settings to
   'DENY'. *)

module Make () = struct
  let m () =
    let filter handler req =
      Logs.warn (fun m -> m "clickjacking middleware is not implemented");
      handler req
    in
    Opium.Std.Rock.Middleware.create ~name:"clickjacking" ~filter
  ;;
end