PC-1294: specify csrf trusted origins

use the BASE_URL environment variable to make this work across environments
UKGovernmentBEIS · Dec 30, 2024 · 1b3ae63 · 1b3ae63
1 parent f87d8a3
commit 1b3ae63
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/help_to_heat/settings.py b/help_to_heat/settings.py
@@ -258,6 +258,8 @@ def show_toolbar(request):
 
 TOTP_ISSUER = "Help to Heat Supplier Portal"
 
+CSRF_TRUSTED_ORIGINS = [BASE_URL]
+
 if not DEBUG:
     SESSION_COOKIE_SECURE = True
     SESSION_EXPIRE_AT_BROWSER_CLOSE = True