Add CSRF_TRUSTED_ORIGINS setting

ksiuwr · Nov 20, 2024 · 8d068eb · 8d068eb
1 parent 9c10dad
commit 8d068eb
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/app/server/settings/common.py b/app/server/settings/common.py
@@ -65,6 +65,7 @@ def random_string(length=10):
 DEBUG = False
 
 ALLOWED_HOSTS = os.environ.get("HOSTS", "staging.zosia.org").split(",")
+CSRF_TRUSTED_ORIGINS = [f"https://*.{host}" for host in ALLOWED_HOSTS]
 
 AUTH_USER_MODEL = "users.User"
 

diff --git a/app/server/settings/dev.py b/app/server/settings/dev.py
@@ -54,3 +54,4 @@
 # Especially room.js makes heavy use of it
 INTERNAL_IPS = ['127.0.0.1']
 ALLOWED_HOSTS = ['127.0.0.1', '0.0.0.0', 'localhost']
+CSRF_TRUSTED_ORIGINS = [f"http://*.{host}" for host in ALLOWED_HOSTS]