diff --git a/kholles_web/settings.py b/kholles_web/settings.py
index 483041b..2660868 100644
--- a/kholles_web/settings.py
+++ b/kholles_web/settings.py
@@ -25,7 +25,17 @@ SECRET_KEY = 'django-insecure-$)@!wj+$^y1@^tr78ay&)cna10da_k^vncrbo+4ja-qth$8bhz
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = True
 
-ALLOWED_HOSTS = ["127.0.0.1", "mp2i-vms.fr"]
+ALLOWED_HOSTS = ["127.0.0.1", "colles.mp2i-vms.fr"]
+
+CSRF_TRUSTED_ORIGINS = [
+    "http://127.0.0.1:8000",
+    "https://colles.mp2i-vms.fr"
+],
+
+CORS_ORIGIN_WHITELIST = [
+    "http://localhost:8000",
+    "https://colles.mp2i-vms.fr"
+]
 
 
 # Application definition