feat: update CORS and CSRF trusted origins for improved security

This commit is contained in:
saani 2025-12-05 12:52:52 +00:00
parent ee8239aa1f
commit 4017ceac51

View File

@ -15,14 +15,17 @@ DEBUG = os.getenv('DEBUG', 'False').lower() == 'true'
ALLOWED_HOSTS = os.getenv('ALLOWED_HOSTS', '*').split(',')
CORS_ALLOWED_ORIGINS = [
'https://attunehearttherapy.com'
'https://attunehearttherapy.com',
'https://www.attunehearttherapy.com',
'https://api.attunehearttherapy.com',
]
CORS_ALLOW_CREDENTIALS = True
CSRF_TRUSTED_ORIGINS = [
'https://api.attunehearttherapy.com',
'https://attunehearttherapy.com'
'https://attunehearttherapy.com',
'https://www.attunehearttherapy.com',
]
INSTALLED_APPS = [