Set X_FRAME_OPTIONS to SAMEORIGIN for allow massmail message preview in iframe.

DjangoCRM · web-flow · commit e04f07ec480b · 2025-07-26T16:02:39.000Z
diff --git a/webcrm/settings.py b/webcrm/settings.py
@@ -186,6 +186,7 @@
 SESSION_COOKIE_SECURE = False
 CSRF_COOKIE_SECURE = False
 SECURE_HSTS_PRELOAD = False
+X_FRAME_OPTIONS = "SAMEORIGIN"
 
 DJANGO_RUNSERVER_HIDE_WARNING = True
 
