🐛 Patch Django 4.0 CSRF Bug

pennlabs · Jan 3, 2024 · 9e7d036 · 9e7d036
1 parent 152773b
commit 9e7d036
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/backend/Platform/settings/base.py b/backend/Platform/settings/base.py
@@ -169,6 +169,11 @@
 # CORS Settings
 
 CORS_ALLOW_ALL_ORIGINS = True
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
+
+# CSRF Settings
+CSRF_TRUSTED_ORIGINS = [f"https://*.{domain}" for domain in DOMAINS]
+
 
 # OAuth2 Settings