Allow SAMEORIGIN for X-Frame-Options

This was causing issues for iframes used by the Winbox library, it's
now fixed.

Signed-off-by: Alek Ratzloff <alekratz@gmail.com>

threadchat/settings.py

@@ -126,6 +126,9 @@ STATIC_URL = "static/"
 # Default primary key field type
 # https://docs.djangoproject.com/en/4.0/ref/settings/#default-auto-field
 
+# X-Frame-Options header from XFrameOptionsMiddleware
+X_FRAME_OPTIONS = "SAMEORIGIN"
+
 DEFAULT_AUTO_FIELD = "django.db.models.BigAutoField"
 
 # Media root - where media files are stored on the disk