add CSRF_TRUSTED_ORIGINS to settings

This commit is contained in:
imperosol committed 2025-02-16 12:47:46 +01:00
1 parent 41bff53853
commit 59e90ec754
2 files changed
+4

No files matched your search

+1
View File
@@ -65,6 +65,7 @@ INTERNAL_IPS = ["127.0.0.1"]
# force csrf tokens and cookies to be secure when in https
CSRF_COOKIE_SECURE = env.bool("HTTPS", default=True)
CSRF_TRUSTED_ORIGINS = env.list("CSRF_TRUSTED_ORIGINS", default=[])
SESSION_COOKIE_SECURE = env.bool("HTTPS", default=True)
X_FRAME_OPTIONS = "SAMEORIGIN"