File tree Expand file tree Collapse file tree 1 file changed +4
-1
lines changed
apps/svelte.dev/content/docs/kit/98-reference Expand file tree Collapse file tree 1 file changed +4
-1
lines changed Original file line number Diff line number Diff line change @@ -257,6 +257,7 @@ checkOrigin?: boolean;
257257<div class =" ts-block-property-bullets " >
258258
259259- <span class =" tag " >default</span > ` true `
260+ - <span class =" tag deprecated " >deprecated</span > Use ` trustedOrigins: ['*'] ` instead
260261
261262</div >
262263
@@ -281,11 +282,13 @@ trustedOrigins?: string[];
281282
282283</div >
283284
284- An array of origins that are allowed to make cross-origin form submissions to your app, even when ` checkOrigin ` is ` true ` .
285+ An array of origins that are allowed to make cross-origin form submissions to your app.
285286
286287Each origin should be a complete origin including protocol (e.g., ` https://payment-gateway.com ` ).
287288This is useful for allowing trusted third-party services like payment gateways or authentication providers to submit forms to your app.
288289
290+ If the array contains ` '*' ` , all origins will be trusted. This is generally not recommended!
291+
289292** Warning** : Only add origins you completely trust, as this bypasses CSRF protection for those origins.
290293
291294</div >
You can’t perform that action at this time.
0 commit comments