Document cross_origin_renderer_url

This commit is contained in:
David Baker 2016-12-02 13:43:41 +00:00
parent 9026cc4977
commit d0c2ab4cf1
1 changed files with 9 additions and 0 deletions

View File

@ -107,6 +107,15 @@ You can configure the app by copying `config.sample.json` to
valid location on this network. This is used as a hint to the user to indicate
when a valid location has been entered so it's not necessary for this to be
exactly correct. Optional.
1. `cross_origin_renderer_url`: URL to a static HTML page hosting code to help display
encrypted file attachments. This MUST be hosted on a completely separate domain to
anything else since it is used to isolate the privileges of file attachments to this
domain. Default: `usercontent.riot.im`. The HTML this page needs to contain is:
```
<html><head><script>
window.onmessage=function(e){eval("("+e.data.code+")")(e)}
</script></head><body></body></html>
```
Running as a Desktop app
========================