Добавлены первоисточник (origin) для csrf #27

2 years ago · 88563f1cb8
1 changed files with 3 additions and 1 deletions
--- a/crossposting_backend/private/settings.example.py
+++ b/crossposting_backend/private/settings.example.py
@ -7,7 +7,9 @@ DEBUG = False
 SECRET_KEY = 'django-insecure-aaaa'

 SALT = 'aaaaaaaa'
-ALLOWED_HOSTS = []
+ALLOWED_HOSTS = ['localhost']
+
+CSRF_TRUSTED_ORIGINS = ['http://zakonvremeni.ru:8989',]

 LOG_DIR = path.join(Path(__file__).resolve().parent.parent.parent, 'logs/')