diff --git a/.env.dist b/.env.dist
index d36c0f4ea..fcde20f8c 100644
--- a/.env.dist
+++ b/.env.dist
@@ -6,7 +6,8 @@ SECRET_KEY=django-insecure-j8op9)1q8$1&0^s&p*_0%d#pr@w9qj@1o=3#@d=a(^@9@zd@%j
 
 # Don't use "*" for ALLOWED_HOSTS in production
 ALLOWED_HOSTS=www.example.com,example.com,*
-CSRF_TRUSTED_ORIGINS=example.com,*
+
+CSRF_TRUSTED_ORIGINS=
 
 # Database URL