diff --git a/dashboard_viewer/uploader/decorators.py b/dashboard_viewer/uploader/decorators.py index 7da5c199..76daa74c 100644 --- a/dashboard_viewer/uploader/decorators.py +++ b/dashboard_viewer/uploader/decorators.py @@ -3,7 +3,6 @@ from django.conf import settings from django.http import HttpResponseForbidden from django.views.decorators.clickjacking import xframe_options_exempt -from django.views.decorators.csrf import csrf_exempt def uploader_decorator(view_func): @@ -13,16 +12,14 @@ def uploader_decorator(view_func): If not response with 403 Else don't do any verification """ - wrapped_view = csrf_exempt(view_func) - wrapped_view = xframe_options_exempt(wrapped_view) - if not settings.SINGLE_APPLICATION_MODE: + wrapped_view = xframe_options_exempt(view_func) def check_host(request, *args, **kwargs): if request.get_host() != settings.MAIN_APPLICATION_HOST: return HttpResponseForbidden() return view_func(request, *args, **kwargs) - wrapped_view = wraps(wrapped_view)(check_host) + return wraps(wrapped_view)(check_host) - return wrapped_view + return view_func