feat(settings.py): add CSRF_TRUSTED_ORIGINS setting to enhance security

This change allows the application to specify trusted origins for CSRF protection, improving the overall security of the application.
crowdbotics · Jan 27, 2025 · 9830012 · 9830012
1 parent e60aaae
commit 9830012
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/{{cookiecutter.project_slug}}/{{cookiecutter.project_slug}}/settings.py b/{{cookiecutter.project_slug}}/{{cookiecutter.project_slug}}/settings.py
@@ -68,6 +68,8 @@
 ALLOWED_HOSTS = env.list("HOST", default=["*"])
 SITE_ID = 1
 
+CSRF_TRUSTED_ORIGINS = env.list("CSRF_TRUSTED_ORIGINS", default=[])
+
 SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
 SECURE_SSL_REDIRECT = env.bool("SECURE_REDIRECT", default=False)