Updating policies for django

spacetelescope · Nov 25, 2024 · a2935ea · a2935ea
1 parent 5bd807f
commit a2935ea
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/jwql/website/jwql_proj/settings.py b/jwql/website/jwql_proj/settings.py
@@ -40,7 +40,10 @@
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = get_config()['django_debug']
 
+# Security settings to allow Jdaviz quicklook
+# Might well be avoidable if the Jdaviz Solara server were behind an SSH reverse proxy.
 X_FRAME_OPTIONS = "SAMEORIGIN"
+SECURE_CONTENT_TYPE_NOSNIFF = False
 
 ALLOWED_HOSTS = ['*']