summaryrefslogtreecommitdiff
path: root/addons/auth_signup
diff options
context:
space:
mode:
authorOlivier Dony <odo@openerp.com>2017-11-01 21:41:24 +0100
committerOlivier Dony <odo@openerp.com>2017-11-01 23:38:56 +0100
commitec00c27ca398b1360b6c199c7b0ccc1037548eef (patch)
tree9c09d3ee9d12ce75c0ff23636a37ef7990d557bb /addons/auth_signup
parent810b6aa7600bad6bba4d0fc67f04ecf4975193d5 (diff)
[FIX] auth_signup: correct leftover from 6d16915d397db3d92795a19800f697226dcbc75
The /web/signup controller was also supposed to get the special frame header, like all sign-in/up pages.
Diffstat (limited to 'addons/auth_signup')
-rw-r--r--addons/auth_signup/controllers/main.py4
1 files changed, 3 insertions, 1 deletions
diff --git a/addons/auth_signup/controllers/main.py b/addons/auth_signup/controllers/main.py
index dcaba89bc61..ffea162a563 100644
--- a/addons/auth_signup/controllers/main.py
+++ b/addons/auth_signup/controllers/main.py
@@ -40,7 +40,9 @@ class AuthSignupHome(Home):
_logger.error(e.message)
qcontext['error'] = _("Could not create a new account.")
- return request.render('auth_signup.signup', qcontext)
+ response = request.render('auth_signup.signup', qcontext)
+ response.headers['X-Frame-Options'] = 'DENY'
+ return response
@http.route('/web/reset_password', type='http', auth='public', website=True)
def web_auth_reset_password(self, *args, **kw):