diff --git a/corpus/corpus/settings.py b/corpus/corpus/settings.py
index 739193e4..b602107f 100644
--- a/corpus/corpus/settings.py
+++ b/corpus/corpus/settings.py
@@ -41,7 +41,7 @@
 
 if os.getenv("LIVECYCLE"):
     ALLOWED_HOSTS.append("*")
-    CSRF_TRUSTED_ORIGINS.append("*")
+    CSRF_TRUSTED_ORIGINS.extend(["http://*", "https://*"])
 
 # Application definition