From dbce9b03958be0236aa22d27a981356cb0de5adb Mon Sep 17 00:00:00 2001 From: Raphael Michel Date: Thu, 18 Apr 2019 17:19:42 +0200 Subject: [PATCH] Allow error pages to be embedded in frames (to ease widget troubleshooting) --- src/pretix/base/views/errors.py | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/src/pretix/base/views/errors.py b/src/pretix/base/views/errors.py index aaa5979ae8..2814354470 100644 --- a/src/pretix/base/views/errors.py +++ b/src/pretix/base/views/errors.py @@ -56,7 +56,9 @@ def page_not_found(request, exception): } template = get_template('404.html') body = template.render(context, request) - return HttpResponseNotFound(body) + r = HttpResponseNotFound(body) + r.xframe_options_exempt = True + return r @requires_csrf_token @@ -65,7 +67,9 @@ def server_error(request): template = loader.get_template('500.html') except TemplateDoesNotExist: return HttpResponseServerError('

Server Error (500)

', content_type='text/html') - return HttpResponseServerError(template.render({ + r = HttpResponseServerError(template.render({ 'request': request, 'sentry_event_id': last_event_id(), })) + r.xframe_options_exempt = True + return r