PyCharm Python Security plugin
Contents:
Django middleware is missing XFrameOptionsMiddleware, which blocks clickjacking.
XFrameOptionsMiddleware
Add 'django.middleware.clickjacking.XFrameOptionsMiddleware' to MIDDLEWARE in Django settings
'django.middleware.clickjacking.XFrameOptionsMiddleware'
MIDDLEWARE