Code review comment for lp:~julian-edwards/maas/clickjacking-bug-1298784

Testing is a grey area with these things, but I think you're OK. My feeling is that code which merely states configuration only needs to be tested for:

1. Running at all. I'm sure that's covered already.
2. Stating things correctly, if stating them incorrectly is plausible. Not here though.
3. Producing the right interaction within the scope of the product.

For #3 I would say the interaction is completely between Django and the browser. The only thing you do here is tell Django that it should happen.