Add CSRF_TRUSTED_ORIGINS setting to whitelist the production domains (attunehearttherapy.com and its api subdomain) for CSRF verification. This ensures secure cross-origin POST requests from the frontend. Also add documentation comment for CORS configuration section. |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| asgi.py | ||
| settings.py | ||
| urls.py | ||
| views.py | ||
| wsgi.py | ||