From 75928c651137dbfc38ecd15376618451064c0979 Mon Sep 17 00:00:00 2001
From: Lyxminxx <madelen@duck.com>
Date: Sun, 20 Sep 2026 01:00:41 +0200
Subject: [PATCH] fixed csrf

---
 core/settings.py | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/core/settings.py b/core/settings.py
index bf76a1f..c368d98 100644
--- a/core/settings.py
+++ b/core/settings.py
@@ -26,7 +26,12 @@ SECRET_KEY = 'django-insecure-m#==%hz74d192o)4!#_!dpz%$yox@!hkabc9)pggkkiuvc7((q
 DEBUG = False
 
 ALLOWED_HOSTS = ['*']
-
+CSRF_TRUSTED_ORIGINS = [
+    'https://jast.maddiemightcry.xyz',
+    'http://100.104.132.118:8000',
+    'http://localhost:8000',
+    'http://127.0.0.1:8000',
+]
 
 # Application definition