"As a general rule, it's not possible to securely allow arbitrary user-provided content on a subdomain." This rule is also good to keep in mind when choosing a

"As a general rule, it's not possible to securely allow arbitrary user-provided content on a subdomain." This rule is also good to keep in mind when choosing a domain for non-production environments!