fix(conf/default.py): use DASHBOARD_CSRF_TRUSTED_ORIGINS as env vars (#…

…1148)
TencentBlueKing · Jan 7, 2025 · 0c2f369 · 0c2f369
1 parent 5d40022
commit 0c2f369
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/dashboard/apigateway/apigateway/conf/default.py b/src/dashboard/apigateway/apigateway/conf/default.py
@@ -166,7 +166,7 @@
 
 
 # CSRF Config
-CSRF_TRUSTED_ORIGINS = env.list("CSRF_TRUSTED_ORIGINS", default=[])
+CSRF_TRUSTED_ORIGINS = env.list("DASHBOARD_CSRF_TRUSTED_ORIGINS", default=[])
 CSRF_COOKIE_DOMAIN = env.str("DASHBOARD_CSRF_COOKIE_DOMAIN")
 CSRF_COOKIE_NAME = env.str("DASHBOARD_CSRF_COOKIE_NAME", f"{BK_APP_CODE}_csrftoken")