lukas
/
timetracker
1
0
Fork 0
Code Issues 18 Pull Requests 3 Actions Packages Projects 1 Releases 20 Wiki Activity

Fix CSRF error #22

Merged
lukas merged 2 commits from fix-csrf into main 2023-01-08 14:35:28 +00:00
Conversation 0 Commits 2 Files Changed 4 +7 -6
2 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit d3682368b4 - Show all commits

4
Dockerfile
View File

@ -6,7 +6,7 @@ RUN npm install && \
FROM python:3.10.9-alpine FROM python:3.10.9-alpine
ENV VERSION_NUMBER 0.1.2 ENV VERSION_NUMBER 0.1.0-59-gc9b2d5b
ENV PROD 1 ENV PROD 1
RUN apk add \ RUN apk add \
@ -28,4 +28,4 @@ RUN pip install --no-cache-dir poetry
RUN poetry install --without dev RUN poetry install --without dev
EXPOSE 8000 EXPOSE 8000
ENTRYPOINT [ "/entrypoint.sh" ] CMD [ "/entrypoint.sh" ]

7
src/web/web/settings.py
View File

@ -145,7 +145,8 @@ LOGGING = {
}, },
} }
_csrf_trusted_origins = os.environ.get("CSRF_TRUSTED_ORIGINS")
if _csrf_trusted_origins:
CSRF_TRUSTED_ORIGINS = _csrf_trusted_origins.split(",")
else:
CSRF_TRUSTED_ORIGINS = [] CSRF_TRUSTED_ORIGINS = []
if os.environ.get("PROD"):
CSRF_TRUSTED_ORIGINS.append(os.environ.get("CSRF_TRUSTED_ORIGINS"))