send httpUnsafeOrigin via /api/config

2018-01-23 16:41:54 +01:00
parent 044384a576
commit acd5574008
2 changed files with 3 additions and 0 deletions
--- a/config.example.js
+++ b/config.example.js
@@ -91,6 +91,8 @@ module.exports = {
    // cross-domain iframe. It can simply host the same content as CryptPad.
    // httpSafeOrigin: "https://some-other-domain.xyz",

+    httpUnsafeOrigin: domain,
+
    /*  your server's websocket url is configurable
     *  (default: '/cryptpad_websocket')
     *