set default aldryn.io to CSRF trusted hosts

divio · Feb 21, 2024 · 105200c · 105200c
1 parent f5b4166
commit 105200c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/settings.py b/settings.py
@@ -25,7 +25,7 @@
 DEBUG = os.getenv('DEBUG', default=False)
 SECRET_KEY = os.getenv('SECRET_KEY')
 ALLOWED_HOSTS = os.getenv('ALLOWED_HOSTS', default='*').split(',')
-CSRF_TRUSTED_ORIGINS = os.getenv('CSRF_TRUSTED_ORIGINS', default='*').split(',')
+CSRF_TRUSTED_ORIGINS = os.getenv('CSRF_TRUSTED_ORIGINS', default='https://*.aldryn.io').split(',')
 
 
 # Application definition