# CSRF_TRUSTED_ORIGINS
* new in Django4: setting CSRF_TRUSTED_ORIGINS needs to be set to schema+host for new CSRF security handling
This commit is contained in:
parent
691292c325
commit
fb67e42078
@ -42,6 +42,10 @@ ALLOWED_HOSTS = [
|
|||||||
"localhost",
|
"localhost",
|
||||||
]
|
]
|
||||||
|
|
||||||
|
CSRF_TRUSTED_ORIGINS = [
|
||||||
|
"http://localhost", # not only host but schema (http/s) as well!
|
||||||
|
]
|
||||||
|
|
||||||
# Authentication settings
|
# Authentication settings
|
||||||
LOGIN_URL = "/login/"
|
LOGIN_URL = "/login/"
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user