File tree Expand file tree Collapse file tree 1 file changed +4
-1
lines changed
apps/svelte.dev/content/docs/kit/98-reference Expand file tree Collapse file tree 1 file changed +4
-1
lines changed Original file line number Diff line number Diff line change @@ -257,6 +257,7 @@ checkOrigin?: boolean;
257
257
<div class =" ts-block-property-bullets " >
258
258
259
259
- <span class =" tag " >default</span > ` true `
260
+ - <span class =" tag deprecated " >deprecated</span > Use ` trustedOrigins: ['*'] ` instead
260
261
261
262
</div >
262
263
@@ -281,11 +282,13 @@ trustedOrigins?: string[];
281
282
282
283
</div >
283
284
284
- An array of origins that are allowed to make cross-origin form submissions to your app, even when ` checkOrigin ` is ` true ` .
285
+ An array of origins that are allowed to make cross-origin form submissions to your app.
285
286
286
287
Each origin should be a complete origin including protocol (e.g., ` https://payment-gateway.com ` ).
287
288
This is useful for allowing trusted third-party services like payment gateways or authentication providers to submit forms to your app.
288
289
290
+ If the array contains ` '*' ` , all origins will be trusted. This is generally not recommended!
291
+
289
292
** Warning** : Only add origins you completely trust, as this bypasses CSRF protection for those origins.
290
293
291
294
</div >
You can’t perform that action at this time.
0 commit comments