Allow CSRF_TRUSTED_ORIGINS to be set by env variable

davegaeddert · davegaeddert · commit b95ddebc3670 · 2024-06-14T15:50:46.000-05:00
diff --git a/bolt/bolt/runtime/global_settings.py b/bolt/bolt/runtime/global_settings.py
@@ -137,7 +137,7 @@
 CSRF_COOKIE_HTTPONLY = False
 CSRF_COOKIE_SAMESITE = "Lax"
 CSRF_HEADER_NAME = "HTTP_X_CSRFTOKEN"
-CSRF_TRUSTED_ORIGINS = []
+CSRF_TRUSTED_ORIGINS: list[str] = []
 CSRF_USE_SESSIONS = False
 
 ###########
