Additional trusted origins (scheme+host) beyond the request's own origin.
The request's own origin (derived from request.url) is always implicitly
trusted. Default: [].
Type
readonlystring[]
Usage
import { type CsrfOptions } from "http-security-plugin/src/index.ts";