From 374c1a40beea646ad3d4f66ba7d5b9ef88a82e4d Mon Sep 17 00:00:00 2001 From: Jennifer Richards Date: Tue, 16 May 2023 11:26:30 -0300 Subject: [PATCH] chore: Use new format for CSRF_TRUSTED_ORIGINS setting --- ietf/settings.py | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/ietf/settings.py b/ietf/settings.py index e0c6820a8..6f8673d7b 100644 --- a/ietf/settings.py +++ b/ietf/settings.py @@ -319,7 +319,14 @@ UTILS_LOGGER_LEVELS: Dict[str, str] = { X_FRAME_OPTIONS = 'SAMEORIGIN' -CSRF_TRUSTED_ORIGINS = ['ietf.org', '*.ietf.org', 'meetecho.com', '*.meetecho.com', 'gather.town', '*.gather.town', ] +CSRF_TRUSTED_ORIGINS = [ + "https://ietf.org", + "https://*.ietf.org", + 'https://meetecho.com', + 'https://*.meetecho.com', + 'https://gather.town', + 'https://*.gather.town', +] CSRF_COOKIE_SAMESITE = 'None' CSRF_COOKIE_SECURE = True