Skip to content

Fix placeholder links for security #1799

@vishaangelova

Description

@vishaangelova

This is a sub-issue of #1734, and the aim is to address the possibility of malicious dummy links in docs by adding a warning in the related Admin docs.

Parent issue description

For security reasons, we plan to replace any placeholder/fake URLs with non-hostable placeholder segments.

Remove segments that make a valid URL, including prefixes (http://) and TLDs (.com).

before:

<script src="https://<your-cdn-host>.com/path/to/elastic-apm-rum.umd.min-<version>.js" crossorigin></script>

after:

<script src="<your-url>/elastic-apm-rum.umd.min-<version>.js" crossorigin></script>

The placeholder <> can be adapted to use descriptive text for its purpose. For example, a placeholder for a splunk server might look like this:

server: <your-splunk-server-url>/<path>

Metadata

Metadata

Assignees

Labels

Team:AdminIssues owned by the Admin Docs Team

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions