diff options
| author | Olivier Dony <odo@openerp.com> | 2018-07-26 23:48:58 +0200 |
|---|---|---|
| committer | Olivier Dony <odo@odoo.com> | 2018-07-26 23:48:58 +0200 |
| commit | fb31330451f957798d5a6354f80736cf442bb714 (patch) | |
| tree | 7fa0011e4e1c7bebbb0a3422eaab806bc86aa68a | |
| parent | b8ab55319b015df5abcff58e45c5fa80c15c91d8 (diff) | |
[FIX] auth_signup: correct leftover from 6d16915d397db3d92795a19800f697226dcbc75
The /web/signup controller was also supposed to get the special frame
header, like all sign-in/up pages.
| -rw-r--r-- | addons/auth_signup/controllers/main.py | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/addons/auth_signup/controllers/main.py b/addons/auth_signup/controllers/main.py index 0b2b3aab9a8..ae4a5a91311 100644 --- a/addons/auth_signup/controllers/main.py +++ b/addons/auth_signup/controllers/main.py @@ -40,7 +40,9 @@ class AuthSignupHome(Home): _logger.error(e.message) qcontext['error'] = _("Could not create a new account.") - return request.render('auth_signup.signup', qcontext) + response = request.render('auth_signup.signup', qcontext) + response.headers['X-Frame-Options'] = 'DENY' + return response @http.route('/web/reset_password', type='http', auth='public', website=True) def web_auth_reset_password(self, *args, **kw): |