Skip to content

Docs: Service URL validation and DevTools production guard#2743

Open
corinagum wants to merge 2 commits intomainfrom
cg/security
Open

Docs: Service URL validation and DevTools production guard#2743
corinagum wants to merge 2 commits intomainfrom
cg/security

Conversation

@corinagum
Copy link
Copy Markdown
Collaborator

Summary

Documentation for security hardening changes shipping in the SDK PRs:

New page: Service URL Validation

src/pages/templates/essentials/service-url-validation.mdx + per-language include files

Documents the service URL domain allowlist:

  • Default allowed domains (public, US gov, China clouds)
  • How to add custom domains via additionalAllowedDomains
  • How to disable validation with wildcard *
  • Note on proactive messaging

Updated: DevTools production guard

docs/main/developer-tools/devtools/README.md

Added a warning section explaining that DevTools refuses to start in production environments,
with the environment variable checked per language.

Test plan

  • Docusaurus builds without errors
  • New page renders correctly for all 3 languages
  • Admonitions render correctly

@corinagum corinagum marked this pull request as ready for review April 14, 2026 23:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant