apply the setting to the CMS too

2016-04-08 06:09:03 -04:00
parent ae202dd54a
commit 2be2b52f63
2 changed files with 9 additions and 1 deletions
--- a/cms/envs/common.py
+++ b/cms/envs/common.py
@@ -298,7 +298,9 @@ from lms.envs.common import (

 # Forwards-compatibility with Django 1.7
 CSRF_COOKIE_AGE = 60 * 60 * 24 * 7 * 52
-
+# It is highly recommended that you override this in any environment accessed by
+# end users
+CSRF_COOKIE_SECURE = False

 #################### CAPA External Code Evaluation #############################
 XQUEUE_INTERFACE = {