Skip to content

Commit 793236f

Browse files
Sync kit docs (#1499)
sync kit docs Co-authored-by: svelte-docs-bot[bot] <196124396+svelte-docs-bot[bot]@users.noreply.github.com>
1 parent ffa8bbd commit 793236f

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

apps/svelte.dev/content/docs/kit/98-reference/50-configuration.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -257,6 +257,7 @@ checkOrigin?: boolean;
257257
<div class="ts-block-property-bullets">
258258

259259
- <span class="tag">default</span> `true`
260+
- <span class="tag deprecated">deprecated</span> Use `trustedOrigins: ['*']` instead
260261

261262
</div>
262263

@@ -281,11 +282,13 @@ trustedOrigins?: string[];
281282

282283
</div>
283284

284-
An array of origins that are allowed to make cross-origin form submissions to your app, even when `checkOrigin` is `true`.
285+
An array of origins that are allowed to make cross-origin form submissions to your app.
285286

286287
Each origin should be a complete origin including protocol (e.g., `https://payment-gateway.com`).
287288
This is useful for allowing trusted third-party services like payment gateways or authentication providers to submit forms to your app.
288289

290+
If the array contains `'*'`, all origins will be trusted. This is generally not recommended!
291+
289292
**Warning**: Only add origins you completely trust, as this bypasses CSRF protection for those origins.
290293

291294
</div>

0 commit comments

Comments
 (0)