'The X_FRAME_OPTIONS setting can be set to DENY to have the middleware
use that value for the HTTP header.'

def test_deny(self):

    with override_settings(X_FRAME_OPTIONS='DENY'):
        r = XFrameOptionsMiddleware().process_response(HttpRequest(), HttpResponse())
        self.assertEqual(r['X-Frame-Options'], 'DENY')
    with override_settings(X_FRAME_OPTIONS='deny'):
        r = XFrameOptionsMiddleware().process_response(HttpRequest(), HttpResponse())
        self.assertEqual(r['X-Frame-Options'], 'DENY')
