github/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2024-11-24 18:56:32 -05:00
Code Issues Projects Releases Packages Wiki Activity

docs: add note about separate renderer domain

Browse source 
Signed-off-by: David Mehren <git@herrmehren.de>
This commit is contained in:
David Mehren 2023-03-26 12:01:10 +02:00 committed by Tilman Vatteroth
parent 80eb4c8a1a
commit 57701b5d6c
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
docs/content/config/index.md
View file

@ -42,6 +42,10 @@ steal credentials from the rendered note content, because renderer and editor ar
This increases the security of the software and greatly mitigates [XSS attacks](https://en.wikipedia.org/wiki/Cross-site_scripting).
However, you can run HedgeDoc without this extra security, but we recommend using it if possible.
!!! note
When you want to use a separate domain for `HD_RENDERER_BASE_URL`, your reverse proxy config needs
to be adjusted to direct requests for this domain to the frontend.
## Notes
| environment variable | default | example | description |