[FIX] CSRF_TRUSTED_ORIGINS must not be None

ETH-NEXUS · Jan 4, 2024 · 3d0de00 · 3d0de00
1 parent 8b13aca
commit 3d0de00
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/api/app/ena_upload_ms/settings.py b/api/app/ena_upload_ms/settings.py
@@ -205,9 +205,9 @@
 
 # CSRF configuration
 CSRF_TRUSTED_ORIGINS = (
-    environ.get("DJANGO_CSRF_TRUSTED_ORIGINS").split(",")
+    environ.get("DJANGO_CSRF_TRUSTED_ORIGINS", "*").split(",")
     if environ.get("DJANGO_CSRF_TRUSTED_ORIGINS")
-    else None
+    else []
 )
 CSRF_USE_SESSIONS = False
 CSRF_COOKIE_HTTPONLY = False