Tone down description of publicServer.

2024-11-12 14:12:16 +01:00
parent 010228b188
commit 7ed23b1eb8
1 changed files with 2 additions and 2 deletions
@@ -110,8 +110,8 @@ The fields are as follows:
   files; by default, group files are treated as read-only;

 - `publicServer`: if true, then cross-origin access to the server is
-   allowed.  This is safe if the server is on the public Internet, but not
-   necessarily so if it is on a private network.
+   allowed.  This makes the server vulnerable to cross-origin scripting
+   attacks, but is necessary in some cases.

 - `proxyURL`: if running behind a reverse proxy, this specifies the root
   URL that will be visible outside the proxy.