diff --git a/api/app/ena_upload_ms/settings.py b/api/app/ena_upload_ms/settings.py
index 27036a1..38ebda0 100644
--- a/api/app/ena_upload_ms/settings.py
+++ b/api/app/ena_upload_ms/settings.py
@@ -205,9 +205,9 @@
 
 # CSRF configuration
 CSRF_TRUSTED_ORIGINS = (
-    environ.get("DJANGO_CSRF_TRUSTED_ORIGINS").split(",")
+    environ.get("DJANGO_CSRF_TRUSTED_ORIGINS", "*").split(",")
     if environ.get("DJANGO_CSRF_TRUSTED_ORIGINS")
-    else None
+    else []
 )
 CSRF_USE_SESSIONS = False
 CSRF_COOKIE_HTTPONLY = False