chore(middleware/csrf): Update config TrustedOrigin comments (#2963)

pull/2933/head
Jason McNeil 2024-04-17 14:28:08 -03:00 committed by GitHub
parent 726c4991ba
commit 4d1e993cdb
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 3 deletions

View File

@ -95,9 +95,9 @@ type Config struct {
// For secure requests, that do not include the Origin header, the Referer
// header must match the Host header or one of the TrustedOrigins.
//
// This supports subdomain matching, so you can use a value like "https://.example.com"
// to allow any subdomain of example.com to submit requests.
//
// This supports matching subdomains at any level. This means you can use a value like
// `"https://*.example.com"` to allow any subdomain of `example.com` to submit requests,
// including multiple subdomain levels such as `"https://sub.sub.example.com"`.
//
// Optional. Default: []
TrustedOrigins []string