{"push_id":777170388,"size":1,"distinct_size":1,"ref":"refs/heads/24496_csrf_trusted_origins","head":"f7e61560f0afd41f4c0de8baa6a40d2458e4f7f3","before":"8e47926cf3e834a8cafbeee93b3ad36cd9206f32","commits":[{"sha":"f7e61560f0afd41f4c0de8baa6a40d2458e4f7f3","author":{"email":"c028c213ed5efcf30c3f4fc7361dbde0c893c5b7@kehn.us","name":"Joshua Kehn"},"message":"Refs #24496 -- Add CSRF_TRUSTED_ORIGINS setting and logic\n\nThis patch adds a new setting, `CSRF_TRUSTED_ORIGINS`, which contains a\nlist of other domains that are included during the CSRF Referer header\nverification for secure (HTTPS) requests.\n\nTests and documentation have been updated.","distinct":true,"url":"https://api.github.com/repos/joshkehn/django/commits/f7e61560f0afd41f4c0de8baa6a40d2458e4f7f3"}]}