Merge pull request #122 from gushil/upstream-release-fix-save-OC-22568

OC-22568 Fix save failed because of CSRF trusted origin error
OpenClinica · May 3, 2024 · 49bcdd1 · 49bcdd1
2 parents 44b51ec + 59e4d8c
commit 49bcdd1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/kobo/settings/base.py b/kobo/settings/base.py
@@ -54,7 +54,7 @@
     SESSION_COOKIE_NAME = env.str('SESSION_COOKIE_NAME', 'kobonaut')
     # The trusted CSRF origins must encompass Enketo's subdomain. See
     # https://docs.djangoproject.com/en/2.2/ref/settings/#std:setting-CSRF_TRUSTED_ORIGINS
-    CSRF_TRUSTED_ORIGINS = [SESSION_COOKIE_DOMAIN]
+    CSRF_TRUSTED_ORIGINS = [SESSION_COOKIE_DOMAIN, ".openclinica.io", ".openclinica-dev.io", ".openclinica-dev-eks.io", ".openclinica-staging.io", ".openclinica-staging-2.io"]
     CSRF_COOKIE_SECURE = True
 ENKETO_CSRF_COOKIE_NAME = env.str('ENKETO_CSRF_COOKIE_NAME', '__csrf')
 CSRF_COOKIE_SAMESITE = 'None'