docs(http): add info about unique cookies and XSRF protection on shar…

…ed domains Closes angular#12028
hqz19940616 · Jun 5, 2015 · 2c3cd81 · 2c3cd81
1 parent 41385f0
commit 2c3cd81
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/ng/http.js b/src/ng/http.js
@@ -699,6 +699,9 @@ function $HttpProvider() {
      * properties of either $httpProvider.defaults at config-time, $http.defaults at run-time,
      * or the per-request config object.
      *
+     * In order to prevent collisions in environments where multiple Angular apps share the
+     * same domain or subdomain, we recommend that each application uses unique cookie name.
+     *
      *
      * @param {object} config Object describing the request to be made and how it should be
      *    processed. The object has following properties: