``` CSRF_TRUSTED_ORIGINS = [] for host in ALLOWED_HOSTS: CSRF_TRUSTED_ORIGINS.append('http://' + host) CSRF_TRUSTED_ORIGINS.append('https://' + host) ```