Internal
Public Access
Created Django middleware that detects requests from the KeepItGoing mobile app (via User-Agent) and removes X-Frame-Options header to allow iframe embedding. Changes: - Created tasks/middleware/mobile_app.py with AllowMobileAppFramingMiddleware - Added middleware to settings after XFrameOptionsMiddleware - Detects Capacitor WebView User-Agent patterns - Removes X-Frame-Options only for mobile app, keeps protection for browsers This allows the mobile app to embed the website in an iframe while maintaining clickjacking protection for regular web browsers. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>