Fix: revert removed x-frame-options header in non-debug

diff --git a/src/paperless/settings.py b/src/paperless/settings.py
index a4b27ae28da54584fbd01fd09e9a591e3394c125..b161d70162fe63b6201b6cd1f0ef1275223141b7 100644 (file)
--- a/src/paperless/settings.py
+++ b/src/paperless/settings.py
@@ -549,6 +549,9 @@ def _parse_remote_user_settings() -> str:
 
 HTTP_REMOTE_USER_HEADER_NAME = _parse_remote_user_settings()
 
+# X-Frame options for embedded PDF display:
+X_FRAME_OPTIONS = "SAMEORIGIN"
+
 # The next 3 settings can also be set using just PAPERLESS_URL
 CSRF_TRUSTED_ORIGINS = __get_list("PAPERLESS_CSRF_TRUSTED_ORIGINS")