use correct CSRF_TRUSTED_ORIGINS

czue · May 9, 2024 · a141e20 · a141e20
1 parent 770760a
commit a141e20
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/bigday/settings.py b/bigday/settings.py
@@ -32,7 +32,10 @@
 MAIL_BACKEND = "console"
 
 ALLOWED_HOSTS = ["my_website_url"]
-CSRF_TRUSTED_ORIGINS = ["my_website_url",'https://127.0.0.1' ]
+CSRF_TRUSTED_ORIGINS = [
+    "http://example.com",
+    'https://127.0.0.1'
+]
 
 DEFAULT_AUTO_FIELD = "django.db.models.AutoField"