diff --git a/crm/views/seller_views.py b/crm/views/seller_views.py index 29edd0e..c9a88e8 100644 --- a/crm/views/seller_views.py +++ b/crm/views/seller_views.py @@ -54,7 +54,7 @@ def get_seller_documents(request, pk): docs = [] if seller.aadhar_file: is_verified = f"aadhar_{pk}" in APPROVED_DOCUMENTS - url = request.build_absolute_uri(f"/api/crm/sellers/documents/preview/?file={seller.aadhar_file}") + url = f"/sellers/documents/preview/?file={seller.aadhar_file}" docs.append({ "id": "aadhar", "type": "Aadhar Card", @@ -64,7 +64,7 @@ def get_seller_documents(request, pk): }) if seller.pan_file: is_verified = f"pan_{pk}" in APPROVED_DOCUMENTS - url = request.build_absolute_uri(f"/api/crm/sellers/documents/preview/?file={seller.pan_file}") + url = f"/sellers/documents/preview/?file={seller.pan_file}" docs.append({ "id": "pan", "type": "PAN Card", @@ -75,7 +75,7 @@ def get_seller_documents(request, pk): if seller.gstin: is_verified = f"gstin_{pk}" in APPROVED_DOCUMENTS or seller.is_gstin_verified filename = f"gst_{seller.gstin}.pdf" - url = request.build_absolute_uri(f"/api/crm/sellers/documents/preview/?file={filename}") + url = f"/sellers/documents/preview/?file={filename}" docs.append({ "id": "gstin", "type": "GSTIN Certificate", @@ -211,9 +211,11 @@ def delete_seller(request, pk): import io from django.http import FileResponse +from django.views.decorators.clickjacking import xframe_options_exempt @api_view(['GET']) @permission_classes([IsCRMAdmin]) +@xframe_options_exempt def preview_document(request): filename = request.query_params.get('file', 'document.pdf') if filename.endswith('.pdf'):