From fb31330451f957798d5a6354f80736cf442bb714 Mon Sep 17 00:00:00 2001
From: Olivier Dony <odo@openerp.com>
Date: Thu, 26 Jul 2018 23:48:58 +0200
Subject: [PATCH] [FIX] auth_signup: correct leftover from
 6d16915d397db3d92795a19800f697226dcbc75

The /web/signup controller was also supposed to get the special frame
header, like all sign-in/up pages.
---
 addons/auth_signup/controllers/main.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/addons/auth_signup/controllers/main.py b/addons/auth_signup/controllers/main.py
index 0b2b3aab9a8..ae4a5a91311 100644
--- a/addons/auth_signup/controllers/main.py
+++ b/addons/auth_signup/controllers/main.py
@@ -40,7 +40,9 @@ class AuthSignupHome(Home):
                     _logger.error(e.message)
                     qcontext['error'] = _("Could not create a new account.")
 
-        return request.render('auth_signup.signup', qcontext)
+        response = request.render('auth_signup.signup', qcontext)
+        response.headers['X-Frame-Options'] = 'DENY'
+        return response
 
     @http.route('/web/reset_password', type='http', auth='public', website=True)
     def web_auth_reset_password(self, *args, **kw):