Translations:Manual:$wgCrossSiteAJAXdomains/9/en

The value must be a list of allowed domain names, which can include shell-style wildcards ( to match any character,   to match any number (including zero) of characters).