Dannon Baker 317d67f348 Assert WSGI-served pages send X-Frame-Options exactly once ...

Pages that come through the legacy WSGI app currently get X-Frame-Options from both the WSGI transaction and the FastAPI middleware, so the existing published-page test only checked that SAMEORIGIN was somewhere in the value. Tighten it to an exact match and cover a couple more WSGI-served client routes, since requests joins repeated headers with a comma.

2026-10-14 11:32:15 -04:00

..

galaxy

Merge pull request #24115 from mvdbeek/add-26.2-migration-head

2026-10-14 10:25:21 -04:00

galaxy_ext

…

galaxy_test

Assert WSGI-served pages send X-Frame-Options exactly once

2026-10-14 11:32:15 -04:00

tool_shed

Merge pull request #24100 from mvdbeek/merge-release_26.1-into-dev-2026-10-13-2

2026-10-14 04:18:27 -04:00

tool_shed_client

…