search

abelardopardo / ontask_b

A platform offering teachers and educational designers the capacity to use data to personalise the learner experience.
https://ontasklearning.org
MIT License
42 stars 35 forks source link

CSRF - CSRF_TRUSTED_ORIGINS #245

Open hansesm opened 1 year ago

hansesm commented 1 year ago

Dear OnTask-Team, we've just updated to version 10.4 and had the following problem.

After logging in, django threw an security error: "CSRF verification failed. Request aborted."

We resolved the problem by adding the following to base.py

CSRF_TRUSTED_ORIGINS = ["http://your.ulr/", "http://.your.url"]

We think that this parameter might be missing.

Best regards

abelardopardo commented 1 year ago

Thanks hansesm.

We're currently looking into it.