Remove WTF_CSRF_SSL_STRICT workaround for missing referrers

3 years ago · 9e4aeac16d
parent 7671a1d5c8
commit 9e4aeac16d
1 changed files with 1 additions and 0 deletions
--- a/cps/init.py
+++ b/cps/init.py
@ -72,6 +72,7 @@ app.config.update(
    SESSION_COOKIE_HTTPONLY=True,
    SESSION_COOKIE_SAMESITE='Lax',
    REMEMBER_COOKIE_SAMESITE='Lax',  # will be available in flask-login 0.5.1 earliest
+    WTF_CSRF_SSL_STRICT=False
 )