Skip to content

Commit 5509e8d

Browse files
committed
add https scheme to csrf trusted origin
1 parent 9374496 commit 5509e8d

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

ocfweb/settings.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -180,7 +180,7 @@ def __mod__(self, ref: Any) -> str:
180180

181181
CSRF_COOKIE_SECURE = True
182182
CSRF_COOKIE_DOMAIN = os.getenv('OCFWEB_COOKIE_DOMAIN', 'www.ocf.berkeley.edu')
183-
CSRF_TRUSTED_ORIGINS = [CSRF_COOKIE_DOMAIN]
183+
CSRF_TRUSTED_ORIGINS = ["https://" + CSRF_COOKIE_DOMAIN]
184184
SESSION_COOKIE_SECURE = True
185185
SESSION_COOKIE_DOMAIN = CSRF_COOKIE_DOMAIN
186186
else:

0 commit comments

Comments
 (0)