stephan/bloombase
1
0
Fork 0
Code Issues 9 Pull requests Projects Releases Packages Wiki Activity Actions

fix: add CSRF_TRUSTED_ORIGINS support via env var

Browse source 
Django 5.2 rejects POSTs when the Origin header doesn't match
CSRF_TRUSTED_ORIGINS. Required for non-localhost deployments.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Stephan Kerkman 2026-05-28 11:19:14 +02:00
parent 40e3419160
commit 6727d8b59b
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
plantdb/settings.py
View file

@ -70,3 +70,7 @@ MEDIA_ROOT = BASE_DIR / 'media'
DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField' DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'
PERENUAL_API_KEY = os.environ.get('PERENUAL_API_KEY', '') PERENUAL_API_KEY = os.environ.get('PERENUAL_API_KEY', '')
_trusted = os.environ.get('CSRF_TRUSTED_ORIGINS', '')
if _trusted:
CSRF_TRUSTED_ORIGINS = [o.strip() for o in _trusted.split(',')]