Repository navigation

Add a host allowlist for creative asset rewriting - #1253

Open

dhruv8sh wants to merge 17 commits into

mainfrom

feat/1231-creative-asset-host-allowlist

Open

Add a host allowlist for creative asset rewriting#1253
dhruv8sh wants to merge 17 commits into
mainfrom
feat/1231-creative-asset-host-allowlist

Commits on Oct 28, 2026
- Add design spec and plan for creative asset host allowlist
  dhruv8sh
  committed
  859f244
- Update spec and plan after implementation review
  dhruv8sh
  committed
  556b8f9
- Add rewrite include_domains setting with validation
  dhruv8sh
  committed
  1572bee
- Limit creative asset rewriting to rewrite include_domains
  dhruv8sh
  committed
  3e35d51
- Rewrite link imagesrcset once on the inline creative path
  dhruv8sh
  committed
  839aa6f
- Document rewrite include_domains and case-insensitive exclusions
  dhruv8sh
  committed
  6d7fdf0
- Address review feedback on the include_domains spec and plan
  dhruv8sh
  committed
  df3e88d
- Round-trip include_domains entries through url
  dhruv8sh
  committed
  50acb50
- Use a let-chain in the creative link handler
  dhruv8sh
  committed
  acc5859
- Document include_domains host round-trip rules
  dhruv8sh
  committed
  8b5f270
- Address review feedback on the creative asset host allowlist
  dhruv8sh
  committed
  bc275c0
- Potential fix for pull request finding 'CodeQL / Cleartext logging of sensitive information'
  
  dhruv8sh
  and
  github-advanced-security[bot]
  committed
  e4addd4
- Format the exclude_domains warning after the CodeQL fix
  dhruv8sh
  committed
  8ef7792
- Restore the entry and reason in the exclude_domains warning
  dhruv8sh
  committed
  155324c
- Keep malformed exclude_domains values out of warnings
  dhruv8sh
  committed
  fc34021
- Name include_domains validation errors by index
  dhruv8sh
  committed
  69dd5d5
- Align the allowlist spec with index-based warnings and errors
  dhruv8sh
  committed
  66bf6dd

Commits

Commits on Oct 28, 2026