Zareian 092fcf13f2 add CSRF_TRUSTED_ORIGINS setting for reverse-proxied domains ...

Admin login (and any POST form) fails with "Origin checking failed"
behind a proxy that terminates TLS, since Django had no trusted-origins
list configured at all.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-09-08 22:26:46 +03:30

24 KiB

Raw Blame History

View Raw