def main(request, response): | |
headers = [(b"Content-Type", b"text/html"), (b"X-Frame-Options", request.GET.first(b"value"))] | |
if b"value2" in request.GET: | |
headers.append((b"X-Frame-Options", request.GET.first(b"value2"))) | |
if b"csp_value" in request.GET: | |
headers.append((b"Content-Security-Policy", request.GET.first(b"csp_value"))) | |
body = u"""<!DOCTYPE html> | |
<html> | |
<head> | |
<title>XFO.</title> | |
<script>window.parent.postMessage('Loaded', '*');</script> | |
</head> | |
<body> | |
Loaded | |
</body> | |
</html> | |
""" | |
return (headers, body) |