diff --git a/.env.example b/.env.example
index 32f6b37..e30242c 100644
--- a/.env.example
+++ b/.env.example
@@ -6,4 +6,5 @@ DEBUG=False
 
 SECRET_KEY=your-secret-key
 ALLOWED_HOSTS=localhost,127.0.0.1
-CORS_ALLOWED_ORIGINS=http://localhost:3000,http://127.0.0.1:3000
\ No newline at end of file
+CORS_ALLOWED_ORIGINS=http://localhost:3000,http://127.0.0.1:3000
+CSRF_TRUSTED_ORIGINS=http://localhost:3000,http://127.0.0.1:3000
\ No newline at end of file
diff --git a/mail_management/settings.py b/mail_management/settings.py
index f57173c..20d3b79 100644
--- a/mail_management/settings.py
+++ b/mail_management/settings.py
@@ -27,6 +27,7 @@ DEBUG = os.getenv('DEBUG', 'false').lower() == 'true'
 
 ALLOWED_HOSTS: list[str] = os.getenv('ALLOWED_HOSTS', '').split(',') if os.getenv('ALLOWED_HOSTS') else ['*']
 CORS_ALLOWED_ORIGINS = os.getenv('CORS_ALLOWED_ORIGINS', '').split(',') if os.getenv('CORS_ALLOWED_ORIGINS') else []
+CSRF_TRUSTED_ORIGINS = os.getenv('CSRF_TRUSTED_ORIGINS', '').split(',') if os.getenv('CSRF_TRUSTED_ORIGINS') else []
 
 # Application definition