Web Development
Bug Report
Django CSRF verification failed: Origin checking failed behind an HTTPS proxy
Every POST to our Django admin returned 403 after we moved TLS termination to a Traefik ingress. Django compared the browser's https Origin with a request it believed was plain http. Two settings fixed it without weakening CSRF.