CSRF Django 1.8 referent checker error

Question

I searched about this, but could not find a suitable solution.

I have a site www.example.com and subdomains a.example.com and b.example.com. When I try to send a request from a.example.com to b.example.com, I get a Referer check error.

I have the following settings on a.example.com and b.example.com sites:

CSRF_COOKIE_DOMAIN = ".example.com" 

But I can not use CSRF_COOKIE_DOMAIN .

Answer 1

Django 1.8 has strict link checking for HTTPS. You cannot send messages from a.example.com to b.example.com with CSRF protection included in Django 1.8.

With Django 1.9, they have added a trusted start to CSRF .