fix CSRF

2025-03-04 20:09:06 +08:00
parent a063062903
commit 0ad0a079b4
1 changed files with 2 additions and 0 deletions
--- a/api/settings.py
+++ b/api/settings.py
@@ -28,8 +28,10 @@ DEBUG = os.getenv("ENV") != "production"

 if DEBUG:
    ALLOWED_HOSTS = ["localhost", "127.0.0.1"]
+    CSRF_TRUSTED_ORIGINS = ["http://localhost:3000"]
 else:
    ALLOWED_HOSTS = ["web.xuyue.cc"]
+    CSRF_TRUSTED_ORIGINS = ["https://web.xuyue.cc"]

 # Application definition