fix: remove CSRF_TRUSTED_ORIGINS_WITH_SCHEME variable (#37195)

This commit is contained in:
Ehtesham Alam
2025-08-20 11:42:44 +05:30
committed by GitHub
parent 0c47ddf354
commit cb80118ebf
4 changed files with 0 additions and 7 deletions

View File

@@ -247,8 +247,6 @@ CROSS_DOMAIN_CSRF_COOKIE_NAME: csrftoken
CSRF_COOKIE_SECURE: true
CSRF_TRUSTED_ORIGINS:
- https://*.localhost
CSRF_TRUSTED_ORIGINS_WITH_SCHEME:
- https://*.localhost
DATABASES:
blockstore:
CONN_MAX_AGE: 600

View File

@@ -155,7 +155,6 @@ if 'staticfiles' in CACHES:
# Once we have migrated to service assets off S3, then we can convert this back to
# managed by the yaml file contents
STATICFILES_STORAGE = os.environ.get('STATICFILES_STORAGE', STATICFILES_STORAGE)
CSRF_TRUSTED_ORIGINS = _YAML_TOKENS.get('CSRF_TRUSTED_ORIGINS_WITH_SCHEME', [])
MKTG_URL_LINK_MAP.update(_YAML_TOKENS.get('MKTG_URL_LINK_MAP', {}))

View File

@@ -330,8 +330,6 @@ CROSS_DOMAIN_CSRF_COOKIE_NAME: ''
CSRF_COOKIE_SECURE: true
CSRF_TRUSTED_ORIGINS:
- https://*.sandbox.localhost
CSRF_TRUSTED_ORIGINS_WITH_SCHEME:
- https://*.sandbox.localhost
DASHBOARD_COURSE_LIMIT: 250
DATABASES:
blockstore:

View File

@@ -197,8 +197,6 @@ LOGGING = get_logger_config(
service_variant=SERVICE_VARIANT,
)
CSRF_TRUSTED_ORIGINS = _YAML_TOKENS.get('CSRF_TRUSTED_ORIGINS_WITH_SCHEME', [])
if FEATURES['ENABLE_CORS_HEADERS'] or FEATURES.get('ENABLE_CROSS_DOMAIN_CSRF_COOKIE'):
CORS_ALLOW_CREDENTIALS = True
CORS_ORIGIN_WHITELIST = _YAML_TOKENS.get('CORS_ORIGIN_WHITELIST', ())