Fix CSRF validation by setting CSRF_TRUSTED_ORIGINS (#17)

coredump-ch · Nov 3, 2024 · b799117 · b799117
1 parent a06ccdd
commit b799117
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/config/settings.py b/config/settings.py
@@ -51,6 +51,7 @@ def require_env(name):
 
 if DEBUG is False:
     ALLOWED_HOSTS = [env("ALLOWED_HOST", "reservations.coredump.ch")]
+    CSRF_TRUSTED_ORIGINS = [f"https://{host}" for host in ALLOWED_HOSTS]
 else:
     ALLOWED_HOSTS = []