perf: report to iframe

apps/accounts/api/automations/base.py

@@ -1,6 +1,7 @@
 from django.http import HttpResponse
 from django.shortcuts import get_object_or_404
 from django.utils.translation import gettext_lazy as _
+from django.views.decorators.clickjacking import xframe_options_sameorigin
 from rest_framework import status, mixins, viewsets
 from rest_framework.decorators import action
 from rest_framework.response import Response
@@ -115,9 +116,9 @@ class AutomationExecutionViewSet(
         )
         return Response({'task': task.id}, status=status.HTTP_201_CREATED)
 
+    @xframe_options_sameorigin
     @action(methods=['get'], detail=True, url_path='report')
     def report(self, request, *args, **kwargs):
         execution = self.get_object()
         report = execution.manager.gen_report()
         return HttpResponse(report)
-

apps/accounts/api/automations/gather_account.py

@@ -2,6 +2,7 @@
 #
 from django.http import HttpResponse
 from django.shortcuts import get_object_or_404
+from django.views.decorators.clickjacking import xframe_options_sameorigin
 from rest_framework import status
 from rest_framework.decorators import action
 from rest_framework.response import Response
@@ -48,6 +49,7 @@ class DiscoverAccountsExecutionViewSet(AutomationExecutionViewSet):
         queryset = queryset.filter(automation__type=self.tp)
         return queryset
 
+    @xframe_options_sameorigin
     @action(methods=["get"], detail=False, url_path="adhoc")
     def adhoc(self, request, *args, **kwargs):
         asset_id = request.query_params.get("asset_id")