Update core/settings.py

core/settings.py

@@ -25,9 +25,12 @@ SECRET_KEY = 'django-insecure-bpm=z9@@=29etqf8x)a_8_-a^9adja%!@bt)%0*!*$hewld4*t
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = True
 
-ALLOWED_HOSTS = ['*']
-
+ALLOWED_HOSTS = ['izaheeerr-transcriber.hf.space', 'localhost', '127.0.0.1', '0.0.0.0']
 
+CSRF_TRUSTED_ORIGINS = [
+    'https://izaheeerr-transcriber.hf.space',
+    'https://*.hf.space'
+]
 # Application definition
 
 INSTALLED_APPS = [
@@ -111,7 +114,7 @@ USE_I18N = True
 
 USE_TZ = True
 
-
+SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
 # Static files (CSS, JavaScript, Images)
 # https://docs.djangoproject.com/en/6.0/howto/static-files/