Merge pull request #185 from ricardobranco777/fix_csrf

Add base-url to CSRF_TRUSTED ORIGINS to fix CSRF issue
SUSE · Jan 16, 2023 · 00102ed · 00102ed
2 parents 54b9163 + 3f5f6e2
commit 00102ed
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/webui/settings.py b/webui/settings.py
@@ -34,6 +34,8 @@
 
 ALLOWED_HOSTS = ['*']
 
+CSRF_TRUSTED_ORIGINS = ['https://' + os.getenv('DOMAINNAME', os.uname().nodename)]
+
 DEFAULT_AUTO_FIELD = 'django.db.models.AutoField'