Merge pull request #188 from DefangLabs/edw-fix-django-csrf

lionello · web-flow · commit b37d7926d95f · 2024-09-09T12:27:46.000-07:00
Update CSRF to allow all defang.dev domain
diff --git a/samples/django-postgres/app/crm_platform/settings.py b/samples/django-postgres/app/crm_platform/settings.py
@@ -29,7 +29,7 @@
 ALLOWED_HOSTS = ['*']
 
 CSRF_TRUSTED_ORIGINS = [
-    'https://*.prod1.defang.dev',
+    'https://*.defang.dev',
     'http://localhost:8000',
 ]
 
diff --git a/samples/django/app/defang_sample/settings.py b/samples/django/app/defang_sample/settings.py
@@ -131,10 +131,10 @@
 
 # CSRF
 CSRF_TRUSTED_ORIGINS = [
-    'https://*.prod1.defang.dev'
+    'https://*.defang.dev'
 ]
 
 if DEBUG:
     CSRF_TRUSTED_ORIGINS = [
         'http://localhost:8000',
-    ]
+    ]
