allow cross-origin resource sharing (CROS) when embedding map (#343)

fix #152 and fix #153

geonode/maps/qgis_server_views.py

@@ -22,6 +22,8 @@
 
 from django.conf import settings
 from django.views.generic import CreateView, DetailView
+from django.views.decorators.clickjacking import xframe_options_exempt
+from django.utils.decorators import method_decorator
 from django.core.urlresolvers import reverse
 from django.http import HttpResponse
 
@@ -146,6 +148,10 @@ def get_context_data(self, **kwargs):
         def get_object(self):
             return Map.objects.get(id=self.kwargs.get("mapid"))
 
+        @method_decorator(xframe_options_exempt)
+        def dispatch(self, *args, **kwargs):
+            return super(MapEmbedView, self).dispatch(*args, **kwargs)
+
 
 def map_download_qlr(request, mapid):
     """Download QLR file to open the maps' layer in QGIS desktop.