From bf204ff25fb9a394a6c909435612d31a26c9b533 Mon Sep 17 00:00:00 2001
From: Agate Berriot <aberriot@entrouvert.com>
Date: Thu, 1 Sep 2022 11:02:55 +0200
Subject: [PATCH 5/6] django4: access request headers through request.headers
 instead of request.META (#68607)

---
 src/authentic2/utils/misc.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/authentic2/utils/misc.py b/src/authentic2/utils/misc.py
index 95a030ab..6e5b4f54 100644
--- a/src/authentic2/utils/misc.py
+++ b/src/authentic2/utils/misc.py
@@ -550,7 +550,7 @@ def check_referer(request, skip_post=True):
     """
     if skip_post and request.method == 'POST':
         return True
-    referer = request.META.get('HTTP_REFERER')
+    referer = request.headers.get('Referer')
     return referer and same_origin(request.build_absolute_uri(), referer)
 
 
-- 
2.37.2