add CSRF_TRUSTED_ORIGINS to settings

This commit is contained in:
imperosol
2025-01-25 23:26:24 +01:00
parent 41bff53853
commit 59e90ec754
2 changed files with 4 additions and 0 deletions

View File

@ -65,6 +65,7 @@ INTERNAL_IPS = ["127.0.0.1"]
# force csrf tokens and cookies to be secure when in https
CSRF_COOKIE_SECURE = env.bool("HTTPS", default=True)
CSRF_TRUSTED_ORIGINS = env.list("CSRF_TRUSTED_ORIGINS", default=[])
SESSION_COOKIE_SECURE = env.bool("HTTPS", default=True)
X_FRAME_OPTIONS = "SAMEORIGIN"