List of additional allowed URLs to pass by the CSRF check. Suggested when authentication comes from an IdP.
string or list of string
[ ]