Translations:Manual:$wgCrossSiteAJAXdomains/17/en

Any site listed in this config setting can take actions on behalf of your logged in users if they visit that site.