- healthz improvements

config/config.py

@@ -318,6 +318,12 @@ class Config(object):
     # Content Directory for static content like the changelog, terms & conditions, privacy statement, ...
     CONTENT_DIR = '/app/content'
 
+    # Ensure health check endpoints are exempt from CSRF protection
+    SECURITY_EXEMPT_URLS = [
+        r'^/healthz($|/.*)',
+        r'^/_healthz($|/.*)',
+    ]
+
 
 class DevConfig(Config):
     DEVELOPMENT = True