Whitelist X-CSRFToken header

Co-Authored-By: demestav <demestav@gmail.com>
This commit is contained in:
Bruno Alla 2019-03-14 09:31:15 +02:00 committed by GitHub
parent 419bedfe07
commit c0351a4bb7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -40,5 +40,7 @@ OnHostRule = true
[frontends.django]
backend = "django"
passHostHeader = true
[frontends.django.headers]
HostsProxyHeaders = ['X-CSRFToken']
[frontends.django.routes.dr1]
rule = "Host:{{ cookiecutter.domain_name }}"