Astro Info
Astro v6.0.8
Vite v7.3.1
Node v25.2.1
System Linux (x64)
Package Manager pnpm
Output server
Adapter @astrojs/node (v10.0.3)
Integrations @sentry/astro (v10.45.0)
If this issue only occurs in one browser, which browser is a problem?
No response
Describe the Bug
After upgrading to v6.x I noticed that API requests are no longer being allowed, returning Cross-site POST form submissions are forbidden. I have Allowed Domains set up correctly and in development I run astro dev behind a traefik reverse proxy that handles TLS.
What's the expected result?
I expect to have my domain listed in allowed domains with the https protocol and be allowed to make requests to it if it is behind a TLS terminating reverse proxy
Link to Minimal Reproducible Example
https://github.com/ikadix/astro-allowed-domain-example
Participation
Astro Info
If this issue only occurs in one browser, which browser is a problem?
No response
Describe the Bug
After upgrading to v6.x I noticed that API requests are no longer being allowed, returning
Cross-site POST form submissions are forbidden. I have Allowed Domains set up correctly and in development I run astro dev behind a traefik reverse proxy that handles TLS.What's the expected result?
I expect to have my domain listed in allowed domains with the
httpsprotocol and be allowed to make requests to it if it is behind a TLS terminating reverse proxyLink to Minimal Reproducible Example
https://github.com/ikadix/astro-allowed-domain-example
Participation