Skip to content

docs: add URLAllowlist navigation-restriction example to chrome policies - #478

Merged
dprevoznik merged 1 commit into
mainfrom
hypeship/docs-urlallowlist-section
Aug 4, 2026
Merged

docs: add URLAllowlist navigation-restriction example to chrome policies#478
dprevoznik merged 1 commit into
mainfrom
hypeship/docs-urlallowlist-section

Conversation

@dprevoznik

@dprevoznik dprevoznik commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Summary

Adds a "Restrict navigation to specific URLs" section to browsers/chrome-policies.mdx, directly below "Block DevTools and page source", showing the allowlist-only pattern:

{ "URLBlocklist": ["*"], "URLAllowlist": ["chatgpt.com", "en.wikipedia.org/wiki/Cat"] }

Same level of detail and structure as the DevTools section (intro paragraph + Python/TS CodeGroup).

Notes

  • Entries match a whole domain or a specific path; more specific entries take precedence.
  • The section notes the behavior I verified against a live Kernel browser: the policy gates top-level navigation (non-allowlisted URLs return ERR_BLOCKED_BY_ADMINISTRATOR) but does not block sub-resources or API calls a permitted page loads from other origins.
  • Docs-only change; preview will render at the branch Mintlify URL.

🤖 Generated with Claude Code


Note

Low Risk
Docs-only change with no runtime, API, or security logic modifications.

Overview
Adds a Restrict navigation to specific URLs common-use-case section to browsers/chrome-policies.mdx, placed after the DevTools blocklist example.

The section documents the block-all-then-allow pattern (URLBlocklist: ["*"] plus URLAllowlist for approved domains/paths), including how matching and precedence work and that only top-level navigation is gated (ERR_BLOCKED_BY_ADMINISTRATOR), not sub-resources or cross-origin APIs on allowed pages. Python and TypeScript browsers.create() snippets mirror the existing DevTools section format.

Reviewed by Cursor Bugbot for commit ccb1161. Bugbot is set up for automated code reviews on this repo. Configure here.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@mintlify

mintlify Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Preview deployment for your docs. Learn more about Mintlify Previews.

Project Status Preview Updated (UTC)
Kernel 🟢 Ready View Preview Aug 4, 2026, 4:40 PM

💡 Tip: Enable Workflows to automatically generate PRs for you.

@vercel

vercel Bot commented Aug 4, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
docs Error Error Aug 4, 2026 4:39pm

@dprevoznik
dprevoznik marked this pull request as ready for review August 4, 2026 16:40

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Risk assessment: Very Low

Verdict: Approve

Evidence (from diff only)

  • 1 file changed: browsers/chrome-policies.mdx (+32 / −0)
  • Adds a documentation section with Python and TypeScript examples for URLBlocklist / URLAllowlist Chrome policies
  • No application code, config, CI, infrastructure, auth, or API surface changes
  • No CODEOWNERS file present for this path; no prior approvals to re-evaluate

Why Very Low

This is a small, docs-only addition on a Mintlify documentation page. Blast radius is limited to published docs content; there is no production logic or shared-system impact.

Action: Approving per Very Low risk criteria.

Open in Web View Automation 

Sent by Cursor Automation: Assign PR reviewers

@dprevoznik
dprevoznik merged commit 97f3319 into main Aug 4, 2026
6 of 7 checks passed
@dprevoznik
dprevoznik deleted the hypeship/docs-urlallowlist-section branch August 4, 2026 16:43

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Want fixes drafted automatically? Bugbot Autofix can create code changes for findings. A team admin can enable Autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit ccb1161. Configure here.


### Restrict navigation to specific URLs

To lock a browser to an approved set of URLs, block everything with `URLBlocklist` and then allow back only the URLs you want with `URLAllowlist`. Entries match a whole domain (`chatgpt.com`) or a specific path (`en.wikipedia.org/wiki/Cat`), and more specific entries take precedence. This gates top-level navigation, so any other URL returns `ERR_BLOCKED_BY_ADMINISTRATOR`; it does not block resources or API calls a permitted page loads from other origins.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dense intro needs bullet list

Low Severity

The new “Restrict navigation” intro packs several separable points—block-all plus allowlist, domain vs path-style entries, precedence, top-level ERR_BLOCKED_BY_ADMINISTRATOR, and sub-resource exceptions—into one dense paragraph instead of a lead-in plus bullets per documentation style rules.

Fix in Cursor Fix in Web

Triggered by learned rule: Use bullet lists when covering multiple distinct points in guides

Reviewed by Cursor Bugbot for commit ccb1161. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant