Add CSRF_TRUSTED_ORIGINS to settings.py

DDMAL · Sep 7, 2023 · 5c05b2b · 5c05b2b
1 parent 7e0650b
commit 5c05b2b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/app/public/cantusdata/settings.py b/app/public/cantusdata/settings.py
@@ -167,6 +167,7 @@
 
 SESSION_COOKIE_SECURE = is_production
 CSRF_COOKIE_SECURE = is_production
+CSRF_TRUSTED_ORIGINS = ["https://cantus.simssa.ca", "https://cantus.staging.simssa.ca"]
 
 SECURE_HSTS_SECONDS = 86400
 SECURE_HSTS_INCLUDE_SUBDOMAINS = is_production