Update CSRF trusted origins

sparcs-kaist · Jul 5, 2023 · e707cd1 · e707cd1
1 parent 58ba908
commit e707cd1
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 3 deletions.
diff --git a/ara/settings/dev/__init__.py b/ara/settings/dev/__init__.py
@@ -7,7 +7,10 @@
 DEBUG = True
 
 ALLOWED_HOSTS = ["*"]
-CSRF_TRUSTED_ORIGINS = ["*"]
+CSRF_TRUSTED_ORIGINS = [
+    "https://*.sparcs.org",
+    "http://localhost",
+]
 
 CORS_ORIGIN_ALLOW_ALL = True
 

diff --git a/ara/settings/prod/__init__.py b/ara/settings/prod/__init__.py
@@ -10,8 +10,8 @@
 ]
 
 CSRF_TRUSTED_ORIGINS = [
-    "newara.sparcs.org",
-    "ara.sparcs.org",
+    "https://newara.sparcs.org",
+    "https://ara.sparcs.org",
 ]
 
 SSO_IS_BETA = False