From dfb900797fc98ca7900631ccf8018858c4e43e85 Mon Sep 17 00:00:00 2001 From: yon <38630464+yonbh@users.noreply.github.com> Date: Fri, 29 Oct 2021 10:23:18 +0100 Subject: [PATCH] docs: remove unintended characters in subdomain section in csrf page (#1897) --- docs/docs/debug/csrf.mdx | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/docs/debug/csrf.mdx b/docs/docs/debug/csrf.mdx index 1371168334ea..76d4964412a2 100644 --- a/docs/docs/debug/csrf.mdx +++ b/docs/docs/debug/csrf.mdx @@ -84,13 +84,13 @@ to the SecureApp's Dashboard. Alternatively you can use piping in your app as we do in the Quickstart guide. We do not recommend running them on separate subdomains, e.g. -`https://kratos.my-website/` and `https://secureapp.my-website/`). +`https://kratos.my-website/` and `https://secureapp.my-website/`. To allow cookies to work across subdomains, make sure to set the domain name in the Kratos config file under [`session.cookie.domain`](https://www.ory.sh/kratos/docs/next/guides/configuring-cookies/#session-cookies). -Running the apps on different TLDs will not work at all, e.g. e.g. +Running the apps on different TLDs will not work at all, e.g. `https://kratos-my-website/` and `https://secureapp-my-website/`. Running the services on different ports however is ok, if the domain stays the