We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 20b700c commit 8fb0b92Copy full SHA for 8fb0b92
settings.py
@@ -57,4 +57,7 @@
57
58
SESSION_ENGINE = "api.models.session"
59
60
-CSRF_HEADER_NAME = "HTTP_CSRFTOKEN"
+CSRF_TRUSTED_ORIGINS = []
61
+if ENV != "local":
62
+ CSRF_TRUSTED_ORIGINS.append(SERVICE_SITE_URL.removeprefix("https://"))
63
+ print(f"CSRF_TRUSTED_ORIGINS = {CSRF_TRUSTED_ORIGINS}")
0 commit comments