doc: warning against accidentally disabling CSRF protection

linsyking · Feb 8, 2024 · 559fd0a · 559fd0a
1 parent ce29687
commit 559fd0a
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/global_config.py b/global_config.py
@@ -4,6 +4,7 @@
 user_cache_path = "./canvas/user_caches/"
 
 front_end_domain = "https://canvashelper.netlify.app"  # Used to set CORS and redirect to root path
+# THIS ALSO PROVIDES CSRF ATTACK PROTECTION! MUSN'T BE CHANGED TO "*" OR ANYTHING ELSE UNLESS YOU KNOW WHAT YOU'RE DOING
 uvicorn_domain = "localhost"  # Used to start uvicorn locally by running: `python canvas_app.py`
 uvicorn_port = 9283