From 88e2c6ff0d9ec36504ee7374c25dfb597031dec2 Mon Sep 17 00:00:00 2001
From: Christian Merten <christian@merten.dev>
Date: Mon, 18 Nov 2024 21:58:08 +0100
Subject: [PATCH] settings: allow page embedding on same host

---
 jdav_web/jdav_web/settings/components/base.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/jdav_web/jdav_web/settings/components/base.py b/jdav_web/jdav_web/settings/components/base.py
index bbb8945..efc5144 100644
--- a/jdav_web/jdav_web/settings/components/base.py
+++ b/jdav_web/jdav_web/settings/components/base.py
@@ -75,6 +75,8 @@ MIDDLEWARE = [
     'django.middleware.cache.FetchFromCacheMiddleware',
 ]
 
+X_FRAME_OPTIONS = 'SAMEORIGIN'
+
 ROOT_URLCONF = 'jdav_web.urls'
 
 TEMPLATES = [