diff --git a/eagleproject/core/views.py b/eagleproject/core/views.py index ed693604..e8364b49 100644 --- a/eagleproject/core/views.py +++ b/eagleproject/core/views.py @@ -7,7 +7,6 @@ from django.core.exceptions import ValidationError from django.core.validators import validate_email -from django.views.decorators.csrf import csrf_exempt import random from django.template.loader import render_to_string @@ -851,7 +850,6 @@ def generate_token(): return "%0.12d" % random.randint(0, 999999999999) -@csrf_exempt def subscribe(request): latest_report_url = request.build_absolute_uri('/reports/weekly') if request.method == 'POST': diff --git a/eagleproject/eagleproject/settings.py b/eagleproject/eagleproject/settings.py index 8ac811cb..a66eac6b 100644 --- a/eagleproject/eagleproject/settings.py +++ b/eagleproject/eagleproject/settings.py @@ -60,6 +60,8 @@ ALLOWED_HOSTS = [env("ALLOWED_HOST"), "analytics.ousd.com"] +CSRF_TRUSTED_ORIGINS = ["https://analytics.ousd.com"] + # Application definition