mirror of
https://github.com/ansible/awx.git
synced 2026-03-03 01:38:50 -03:30
Set CSRF_COOKIE_AGE to 'None'.
This causes them to be sent as session cookies, not 1-year cookies.
This commit is contained in:
@@ -169,6 +169,10 @@ SESSION_COOKIE_SECURE = True
|
||||
# Disallow sending csrf cookies over insecure connections
|
||||
CSRF_COOKIE_SECURE = True
|
||||
|
||||
# Limit CSRF cookies to browser sessions
|
||||
CSRF_COOKIE_AGE = None
|
||||
|
||||
|
||||
TEMPLATE_CONTEXT_PROCESSORS = ( # NOQA
|
||||
'django.contrib.auth.context_processors.auth',
|
||||
'django.core.context_processors.debug',
|
||||
|
||||
Reference in New Issue
Block a user