Merge pull request #11983 from edx/e0d/cookie-updates

Updating cookies settings
2016-04-22 07:25:09 -04:00
parent d659dd9f6d 2be2b52f63
commit 9db6b04f2c
4 changed files with 18 additions and 2 deletions
--- a/lms/envs/common.py
+++ b/lms/envs/common.py
@@ -2051,7 +2051,9 @@ MIGRATION_MODULES = {

 # Forwards-compatibility with Django 1.7
 CSRF_COOKIE_AGE = 60 * 60 * 24 * 7 * 52
-
+# It is highly recommended that you override this in any environment accessed by
+# end users
+CSRF_COOKIE_SECURE = False

 ######################### Django Rest Framework ########################