getenv CSRF_TRUSTED_ORIGIN

nationalarchives · Apr 11, 2024 · 1d6f67b · 1d6f67b
1 parent 761c181
commit 1d6f67b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/config/settings/base.py b/config/settings/base.py
@@ -290,7 +290,7 @@
     "WAGTAILADMIN_BASE_URL", "https://nationalarchives.gov.uk"
 )
 
-CSRF_TRUSTED_ORIGINS = [WAGTAILADMIN_BASE_URL]
+CSRF_TRUSTED_ORIGINS = [os.getenv("CSRF_TRUSTED_ORIGIN", "nationalarchives.gov.uk")]
 
 # For search results within Wagtail itself
 WAGTAILSEARCH_BACKENDS = {