chore(deps): bump django from 3.2.18 to 4.2.16 in /requirements (#2096)

* chore(deps): bump django from 3.2.18 to 4.2.16 in /requirements Bumps [django](https://github.com/django/django) from 3.2.18 to 4.2.16. - [Commits](django/django@3.2.18...4.2.16) --- updated-dependencies: - dependency-name: django dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> * fix: fix CSRF issues caused by upgrade from Django 3 to 4 --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: nicomiguelino <[email protected]>
Screenly · Dec 4, 2024 · 08a79e6 · 08a79e6
1 parent d107217
commit 08a79e6
Show file tree

Hide file tree

Showing 5 changed files with 8 additions and 3 deletions.
diff --git a/anthias_django/settings.py b/anthias_django/settings.py
@@ -41,14 +41,17 @@
     # SECURITY WARNING: keep the secret key used in production secret!
     SECRET_KEY = 'django-insecure-7rz*$)g6dk&=h-3imq2xw*iu!zuhfb&w6v482_vs!w@4_gha=j'  # noqa: E501
 
-# @TODO: Resolve hostnames and IP addresses dynamically.
 ALLOWED_HOSTS = [
     '127.0.0.1',
     'localhost',
     'anthias',
     'anthias-server'
 ]
 
+CSRF_TRUSTED_ORIGINS = [
+    'http://anthias'
+]
+
 
 # Application definition
 

diff --git a/docker/nginx/nginx.development.conf b/docker/nginx/nginx.development.conf
@@ -21,6 +21,7 @@ server {
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header Host anthias-server;
+        proxy_set_header Origin http://anthias;
     }
 
     location ~ ^/api/[0-9a-z]+/backup$ {

diff --git a/docker/nginx/nginx.production.conf b/docker/nginx/nginx.production.conf
@@ -20,6 +20,7 @@ server {
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header Host anthias-server;
+        proxy_set_header Origin http://anthias;
     }
 
     location ~ ^/api/[0-9a-z]+/backup$ {

diff --git a/requirements/requirements.txt b/requirements/requirements.txt
@@ -5,7 +5,7 @@ cffi==1.14.4
 configparser==4.0.2
 cryptography==3.3.2
 Cython==0.29.33
-Django==3.2.18
+Django==4.2.16
 djangorestframework==3.14.0
 django-dbbackup==4.2.1
 drf-spectacular==0.27.2

diff --git a/requirements/requirements.viewer.txt b/requirements/requirements.viewer.txt
@@ -5,7 +5,7 @@ certifi==2024.7.4
 configparser==4.0.2
 cryptography==3.3.2
 Cython==0.29.33
-Django==3.2.18
+Django==4.2.16
 django-dbbackup==4.2.1
 drf-spectacular==0.27.2
 future==0.18.3