Skip to content

chore: remove CSRF_TRUSTED_ORIGINS_WITH_SCHEME variable #37195

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
UsamaSadiq merged 2 commits into from
Aug 20, 2025
Merged

chore: remove CSRF_TRUSTED_ORIGINS_WITH_SCHEME variable #37195

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
b17e61c
chore: remove CSRF_TRUSTED_ORIGINS_WITH_SCHEME variable
Alam-2U Aug 13, 2025
e85c9bb
chore: remove CSRF_TRUSTED_ORIGINS_WITH_SCHEME variable
Alam-2U Aug 18, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 0 additions & 2 deletions cms/envs/mock.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -247,8 +247,6 @@ CROSS_DOMAIN_CSRF_COOKIE_NAME: csrftoken
CSRF_COOKIE_SECURE: true
CSRF_TRUSTED_ORIGINS:
- https://*.localhost
CSRF_TRUSTED_ORIGINS_WITH_SCHEME:
- https://*.localhost
DATABASES:
blockstore:
CONN_MAX_AGE: 600
Expand Down
1 change: 0 additions & 1 deletion cms/envs/production.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -155,7 +155,6 @@ def get_env_setting(setting):
# Once we have migrated to service assets off S3, then we can convert this back to
# managed by the yaml file contents
STATICFILES_STORAGE = os.environ.get('STATICFILES_STORAGE', STATICFILES_STORAGE)
CSRF_TRUSTED_ORIGINS = _YAML_TOKENS.get('CSRF_TRUSTED_ORIGINS_WITH_SCHEME', [])

MKTG_URL_LINK_MAP.update(_YAML_TOKENS.get('MKTG_URL_LINK_MAP', {}))

Expand Down
2 changes: 0 additions & 2 deletions lms/envs/mock.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -330,8 +330,6 @@ CROSS_DOMAIN_CSRF_COOKIE_NAME: ''
CSRF_COOKIE_SECURE: true
CSRF_TRUSTED_ORIGINS:
- https://*.sandbox.localhost
CSRF_TRUSTED_ORIGINS_WITH_SCHEME:
- https://*.sandbox.localhost
DASHBOARD_COURSE_LIMIT: 250
DATABASES:
blockstore:
Expand Down
2 changes: 0 additions & 2 deletions lms/envs/production.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -197,8 +197,6 @@ def get_env_setting(setting):
service_variant=SERVICE_VARIANT,
)

CSRF_TRUSTED_ORIGINS = _YAML_TOKENS.get('CSRF_TRUSTED_ORIGINS_WITH_SCHEME', [])

if FEATURES['ENABLE_CORS_HEADERS'] or FEATURES.get('ENABLE_CROSS_DOMAIN_CSRF_COOKIE'):
CORS_ALLOW_CREDENTIALS = True
CORS_ORIGIN_WHITELIST = _YAML_TOKENS.get('CORS_ORIGIN_WHITELIST', ())
Expand Down
Loading