使用python3.9+django4.1.2 开发程序,部署上线后,admin后台post修改操作有保错。提提示CSRF验证失败. 请求被中断
看了下settings.py ,middleware中的csrf校验已经是关闭状态的
MIDDLEWARE = [
'django.middleware.security.SecurityMiddleware',
'django.contrib.sessions.middleware.SessionMiddleware',
'django.middleware.common.CommonMiddleware',
# 'django.middleware.csrf.CsrfViewMiddleware',
'django.contrib.auth.middleware.AuthenticationMiddleware',
'django.contrib.messages.middleware.MessageMiddleware',
'django.middleware.clickjacking.XFrameOptionsMiddleware',
]
搜了下,看到了这篇 https://blog.csdn.net/weixin_37770279/article/details/124480045
解决方法:
settings.py 添加这句代码,域名改为你前端ngx的域名
CSRF_TRUSTED_ORIGINS = ['https://xxxx.demo.com']