github-starred/better-auth
2
0
Fork 0
mirror of https://github.com/better-auth/better-auth.git synced 2026-10-19 11:24:57 -05:00
Code Issues 2.5k Packages Projects Releases 112 Wiki Activity

docs: add warning about localhost in trusted origins (#8527)

Browse Source
This commit is contained in:
Alex Yang
2026-03-10 15:03:39 -07:00
parent 8e089edf42
commit 857fbb3d94
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/content/docs/reference/security.mdx
+4 -1
View File
@@ -200,7 +200,7 @@ Trusted origins prevent CSRF attacks and block open redirects. You can set a lis
### Basic Usage
The most basic usage is to specify exact origins:
The most basic usage is to specify exact origins, below is an example of a trusted origins configuration:
```typescript
{
@@ -211,6 +211,9 @@ The most basic usage is to specify exact origins:
]
}
```
<Callout type="warning">
Do not leave the localhost origin in a trusted origins list of a production auth instance.
</Callout>
### Wildcard Origins