update settings

duhaz_blog/settings.py

@@ -31,6 +31,12 @@ DEBUG = os.getenv('DEBUG', 'False') == 'True'
 
 ALLOWED_HOSTS = os.getenv('ALLOWED_HOSTS', 'localhost,127.0.0.1').split(',')
 
+# CSRF Protection - Domaines de confiance
+CSRF_TRUSTED_ORIGINS = [
+    'https://www.duhaz.fr',
+    'https://duhaz.fr',
+]
+
 
 # Application definition