From 321ca3bf6aafba17a7969879b996292cd16a348c Mon Sep 17 00:00:00 2001
From: Viswamedha Nalabotu <vxn217@student.bham.ac.uk>
Date: Fri, 19 Dec 2025 00:28:47 +0000
Subject: [PATCH] Added csrf trusted origins setting

---
 config/__pycache__/__init__.cpython-313.pyc | Bin 222 -> 222 bytes
 config/__pycache__/settings.cpython-313.pyc | Bin 5838 -> 5838 bytes
 config/settings.py                          |   3 +++
 3 files changed, 3 insertions(+)

diff --git a/config/__pycache__/__init__.cpython-313.pyc b/config/__pycache__/__init__.cpython-313.pyc
index b7eb80b6edc23855bb7c771a43149fee73c4c699..dcdc928d85fbde3094d7a9e2bf4af9680d81eb97 100644
GIT binary patch
delta 21
bcmcb|c#o0yGcPX}0}!-aamsX=$a@h0MkWTC

delta 21
bcmcb|c#o0yGcPX}0}wb>T4p*<<h=+0L01Lv

diff --git a/config/__pycache__/settings.cpython-313.pyc b/config/__pycache__/settings.cpython-313.pyc
index cde58dd71ae7ae632a35224e0e8fa930ebb6f93b..b215aa6d149dbd45d631ab2c296a23008240bfa9 100644
GIT binary patch
delta 19
ZcmX@7drp_@GcPX}0}!-a*~oQ73;;e<1_b~B

delta 19
ZcmX@7drp_@GcPX}0}vGL*vNH63;;b`1=j!o

diff --git a/config/settings.py b/config/settings.py
index 10d31f6..1e0a0a8 100644
--- a/config/settings.py
+++ b/config/settings.py
@@ -170,5 +170,8 @@ if origins:=os.getenv('DJANGO_CORS_ALLOWED_ORIGINS'):
     CORS_ALLOWED_ORIGINS = origins.split(',')
 CORS_ALLOW_CREDENTIALS = True
 
+if trusted_origins:=os.getenv('DJANGO_CSRF_TRUSTED_ORIGINS'):
+    CSRF_TRUSTED_ORIGINS = [origin.strip() for origin in trusted_origins.split(',')]
+
 if DEBUG:
     SECURE_CROSS_ORIGIN_OPENER_POLICY = None