remove csrf_exempt from uploader views

the variable CSRF_TRUSTED_ORIGINS must be set instead to the appropriate hosts

dashboard_viewer/uploader/decorators.py

@@ -3,7 +3,6 @@
 from django.conf import settings
 from django.http import HttpResponseForbidden
 from django.views.decorators.clickjacking import xframe_options_exempt
-from django.views.decorators.csrf import csrf_exempt
 
 
 def uploader_decorator(view_func):
@@ -13,16 +12,14 @@ def uploader_decorator(view_func):
       If not response with 403
     Else don't do any verification
     """
-    wrapped_view = csrf_exempt(view_func)
-    wrapped_view = xframe_options_exempt(wrapped_view)
-
     if not settings.SINGLE_APPLICATION_MODE:
+        wrapped_view = xframe_options_exempt(view_func)
 
         def check_host(request, *args, **kwargs):
             if request.get_host() != settings.MAIN_APPLICATION_HOST:
                 return HttpResponseForbidden()
             return view_func(request, *args, **kwargs)
 
-        wrapped_view = wraps(wrapped_view)(check_host)
+        return wraps(wrapped_view)(check_host)
 
-    return wrapped_view
+    return view_func