Skip to content

Commit

Permalink
docs: add spacing to put emphasizes on warnings
Browse files Browse the repository at this point in the history
Signed-off-by: Guillaume Hivert <hivert.is.coming@gmail.com>
  • Loading branch information
ghivert committed Apr 24, 2024
1 parent e41a4f9 commit 928f960
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions src/cors_builder.gleam
Original file line number Diff line number Diff line change
Expand Up @@ -102,6 +102,7 @@ pub fn new() -> Cors {
}

/// Allow all domains to access your server.
///
/// Be extremely careful, you should not use this function in production!
/// Allowing all origins can easily be a huge security flaw!
/// Allow only the origins you need, and use this function only locally,
Expand Down Expand Up @@ -167,6 +168,7 @@ pub fn max_age(cors: Cors, age: Int) {

/// Allow credentials to be sent in the request. Credentials take form of
/// username and password, stored in cookies most of the time.
///
/// Be extremely careful with this header, and consider it with caution, mainly
/// for legacy systems relying on cookies or for systems aware of the danger of
/// cookies, because of [CSRF attacks](https://developer.mozilla.org/en-US/docs/Glossary/CSRF).
Expand Down

0 comments on commit 928f960

Please sign in to comment.