Skip to content

docs: add URLAllowlist navigation-restriction example to chrome policies - #478

Merged
dprevoznik merged 1 commit into
mainfrom
hypeship/docs-urlallowlist-section
Aug 4, 2026
Merged

docs: add URLAllowlist navigation-restriction example to chrome policies#478
dprevoznik merged 1 commit into
mainfrom
hypeship/docs-urlallowlist-section

Conversation

@dprevoznik

@dprevoznikdprevoznik commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Summary

Adds a "Restrict navigation to specific URLs" section to browsers/chrome-policies.mdx, directly below "Block DevTools and page source", showing the allowlist-only pattern:

{ "URLBlocklist": ["*"], "URLAllowlist": ["chatgpt.com", "en.wikipedia.org/wiki/Cat"] }

Same level of detail and structure as the DevTools section (intro paragraph + Python/TS CodeGroup).

Notes

  • Entries match a whole domain or a specific path; more specific entries take precedence.
  • The section notes the behavior I verified against a live Kernel browser: the policy gates top-level navigation (non-allowlisted URLs return ERR_BLOCKED_BY_ADMINISTRATOR) but does not block sub-resources or API calls a permitted page loads from other origins.
  • Docs-only change; preview will render at the branch Mintlify URL.

🤖 Generated with Claude Code


Note

Low Risk
Docs-only change with no runtime, API, or security logic modifications.

Overview
Adds a Restrict navigation to specific URLs common-use-case section to browsers/chrome-policies.mdx, placed after the DevTools blocklist example.

The section documents the block-all-then-allow pattern (URLBlocklist: ["*"] plus URLAllowlist for approved domains/paths), including how matching and precedence work and that only top-level navigation is gated (ERR_BLOCKED_BY_ADMINISTRATOR), not sub-resources or cross-origin APIs on allowed pages. Python and TypeScript browsers.create() snippets mirror the existing DevTools section format.

Reviewed by Cursor Bugbot for commit ccb1161. Bugbot is set up for automated code reviews on this repo. Configure here.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@mintlify

mintlifyBot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Preview deployment for your docs. Learn more about Mintlify Previews.

ProjectStatusPreviewUpdated (UTC)
Kernel🟢 ReadyView PreviewAug 4, 2026, 4:40 PM

💡 Tip: Enable Workflows to automatically generate PRs for you.

@vercel

vercelBot commented Aug 4, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
docsErrorErrorAug 4, 2026 4:39pm

cursor[bot]
cursorBot approved these changes Aug 4, 2026

@cursorcursorBot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Risk assessment: Very Low

Verdict: Approve

Evidence (from diff only)

  • 1 file changed:browsers/chrome-policies.mdx (+32 / −0)
  • Adds a documentation section with Python and TypeScript examples for URLBlocklist / URLAllowlist Chrome policies
  • No application code, config, CI, infrastructure, auth, or API surface changes
  • No CODEOWNERS file present for this path; no prior approvals to re-evaluate

Why Very Low

This is a small, docs-only addition on a Mintlify documentation page. Blast radius is limited to published docs content; there is no production logic or shared-system impact.

Action: Approving per Very Low risk criteria.

Open in WebView Automation

Sent by Cursor Automation: Assign PR reviewers

@dprevoznik
dprevoznik merged commit 97f3319 into mainAug 4, 2026
6 of 7 checks passed
@dprevoznik
dprevoznik deleted the hypeship/docs-urlallowlist-section branch August 4, 2026 16:43

@cursorcursorBot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Want fixes drafted automatically? Bugbot Autofix can create code changes for findings. A team admin can enable Autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit ccb1161. Configure here.


### Restrict navigation to specific URLs

To lock a browser to an approved set of URLs, block everything with `URLBlocklist` and then allow back only the URLs you want with `URLAllowlist`. Entries match a whole domain (`chatgpt.com`) or a specific path (`en.wikipedia.org/wiki/Cat`), and more specific entries take precedence. This gates top-level navigation, so any other URL returns `ERR_BLOCKED_BY_ADMINISTRATOR`; it does not block resources or API calls a permitted page loads from other origins.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dense intro needs bullet list

Low Severity

The new “Restrict navigation” intro packs several separable points—block-all plus allowlist, domain vs path-style entries, precedence, top-level ERR_BLOCKED_BY_ADMINISTRATOR, and sub-resource exceptions—into one dense paragraph instead of a lead-in plus bullets per documentation style rules.

Fix in CursorFix in Web

Triggered by learned rule: Use bullet lists when covering multiple distinct points in guides

Reviewed by Cursor Bugbot for commit ccb1161. Configure here.

masnwilliams added a commit that referenced this pull request Aug 6, 2026
Brings in #464 (browser-pools guide refresh) and #478 (chrome-policies
URLAllowlist example). One manual resolution: main collapsed the
browsers/pools/ subfolder (faq + overview) into a single
browsers/pools.mdx; applied that at content/docs/browsers/pools.mdx and
dropped the old subfolder (docs.json already redirects the old subpaths
to /browsers/pools). All other content edits auto-merged.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@dprevoznik