fix CSRF issues with proxies

mysociety · Apr 4, 2024 · 24ffc38 · 24ffc38
1 parent 5af054a
commit 24ffc38
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/proj/settings.py b/proj/settings.py
@@ -176,6 +176,9 @@
 
 FEEDBACK_FORM = "https://docs.google.com/forms/d/e/1FAIpQLSeWM8CBVwaksqmEy79JAmgfecodR7skmYBIwhRrc0rho1nisA/viewform"
 
+# make sure CSRF checking still works behind load balancers
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
+
 # Application definition
 
 INSTALLED_APPS = [