Merge pull request #1948 from iamkarlson/feature/fix_csrf_django_40

fixed csrf
TandoorRecipes · Aug 1, 2022 · ea213e2 · ea213e2
2 parents 02cf326 + 897ac97
commit ea213e2
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/recipes/settings.py b/recipes/settings.py
@@ -52,6 +52,9 @@
 
 ALLOWED_HOSTS = os.getenv('ALLOWED_HOSTS').split(',') if os.getenv('ALLOWED_HOSTS') else ['*']
 
+if os.getenv('CSRF_TRUSTED_ORIGINS'):
+    CSRF_TRUSTED_ORIGINS = os.getenv('CSRF_TRUSTED_ORIGINS').split(',')
+
 CORS_ORIGIN_ALLOW_ALL = True
 
 LOGIN_REDIRECT_URL = "index"