Skip to content

Docs: Service URL validation#2743

Merged
corinagum merged 6 commits intomainfrom
cg/security
Apr 22, 2026
Merged

Docs: Service URL validation#2743
corinagum merged 6 commits intomainfrom
cg/security

Conversation

@corinagum
Copy link
Copy Markdown
Collaborator

@corinagum corinagum commented Apr 14, 2026

Summary

Documentation for security hardening changes shipping in the SDK PRs:

New page: Service URL Validation

src/pages/templates/essentials/service-url-validation.mdx + per-language include files

Documents the service URL domain allowlist:

  • Allowed hostnames by cloud environment preset
  • How to add custom domains via additionalAllowedDomains
  • Sovereign cloud FQDNs that require manual configuration
  • How to disable validation with wildcard *
  • Note on proactive messaging

Test plan

  • Docusaurus builds without errors
  • New page renders correctly for all 3 languages
  • Admonitions render correctly

@corinagum corinagum marked this pull request as ready for review April 14, 2026 23:35
Copilot AI review requested due to automatic review settings April 20, 2026 17:43
@corinagum corinagum changed the title Docs: Service URL validation and DevTools production guard Docs: Service URL validation Apr 20, 2026
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds new “Service URL Validation” documentation to the Teams SDK docs site, using the repo’s LanguageInclude system to provide per-language configuration examples.

Changes:

  • New template page describing service URL allowlisting, custom domains, disablement, and proactive messaging guidance.
  • New TypeScript/Python/C# include fragments for “adding custom domains” and “disabling validation” examples.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 3 comments.

File Description
teams.md/src/pages/templates/essentials/service-url-validation.mdx New Essentials page explaining service URL validation behavior and defaults.
teams.md/src/components/include/essentials/service-url-validation/typescript.incl.md TS snippets for adding domains / disabling validation.
teams.md/src/components/include/essentials/service-url-validation/python.incl.md Python snippets for adding domains / disabling validation.
teams.md/src/components/include/essentials/service-url-validation/csharp.incl.md C# snippets (plus appsettings.json example) for adding domains / disabling validation.

Comment thread teams.md/src/components/include/essentials/service-url-validation/csharp.incl.md Outdated
Comment thread teams.md/src/components/include/essentials/service-url-validation/csharp.incl.md Outdated
@corinagum corinagum force-pushed the cg/security branch 2 times, most recently from 08da931 to 3744126 Compare April 22, 2026 18:08
@corinagum corinagum merged commit 0e42c52 into main Apr 22, 2026
2 checks passed
@corinagum corinagum deleted the cg/security branch April 22, 2026 22:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants