fix CSRF
This commit is contained in:
@@ -28,8 +28,10 @@ DEBUG = os.getenv("ENV") != "production"
|
|||||||
|
|
||||||
if DEBUG:
|
if DEBUG:
|
||||||
ALLOWED_HOSTS = ["localhost", "127.0.0.1"]
|
ALLOWED_HOSTS = ["localhost", "127.0.0.1"]
|
||||||
|
CSRF_TRUSTED_ORIGINS = ["http://localhost:3000"]
|
||||||
else:
|
else:
|
||||||
ALLOWED_HOSTS = ["web.xuyue.cc"]
|
ALLOWED_HOSTS = ["web.xuyue.cc"]
|
||||||
|
CSRF_TRUSTED_ORIGINS = ["https://web.xuyue.cc"]
|
||||||
|
|
||||||
# Application definition
|
# Application definition
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user