lukas
/
timetracker
1
0
Fork 0
Code Issues 18 Pull Requests 3 Actions Packages Projects 1 Releases 20 Wiki Activity

Properly unset CSRF_TRUSTED_ORIGINS

This commit is contained in:
Lukáš Kucharczyk 2023-01-05 22:09:35 +01:00
parent bedfbb7f31
commit d00bb1cd06
Signed by: lukas
SSH Key Fingerprint: SHA256:vMuSwvwAvcT6htVAioMP7rzzwMQNi3roESyhv+nAxeg
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Dockerfile
View File

@ -6,7 +6,7 @@ RUN npm install && \
FROM python:3.10-slim-bullseye FROM python:3.10-slim-bullseye
ENV VERSION_NUMBER 0.1.0-41-gf2b08cd ENV VERSION_NUMBER 0.1.0-42-gbedfbb7
ENV PROD 1 ENV PROD 1
RUN useradd --create-home --uid 1000 timetracker RUN useradd --create-home --uid 1000 timetracker

2
src/web/web/settings.py
View File

@ -137,7 +137,7 @@ LOGGING = {
"root": {"handlers": ["console"], "level": "WARNING"}, "root": {"handlers": ["console"], "level": "WARNING"},
} }
CSRF_TRUSTED_ORIGINS = [""] CSRF_TRUSTED_ORIGINS = []
if os.environ.get("PROD"): if os.environ.get("PROD"):
CSRF_TRUSTED_ORIGINS.append(os.environ.get("CSRF_TRUSTED_ORIGINS")) CSRF_TRUSTED_ORIGINS.append(os.environ.get("CSRF_TRUSTED_ORIGINS"))