Skip to content

settings: add cibuglog host to csrf trusted origins

Piotr Kira requested to merge csrf_origins into master

To use properly CSRF secure cookies we have to set CSRF trusted origins, trusting CIBUGLOG_HOST by default seems as a good solution.

Until now my team had CIBugLog deployed (http only) with custom settings.py file which had disabled some "secure" options like CSRF_COOKIE_SECURE etc. I would like to get rid of custom settings.py file which is really not needed and upstream changes.

Edited by Piotr Kira

Merge request reports