Require a trusted HTTPS DOC0 URL without embedded credentials, query or fragment, validate timeout bounds, and reject redirects when sending document bytes and the service credential. This client remains internal and requires independently verified tenant and project authorization.
Validation
7 focused client tests passed; full suite 1,245 passed, 190 skipped; typecheck and lint passed (8 unrelated existing lint warnings).
Local Next.js build passed with a copied existing dependency tree whose source lockfile differs; CI must verify a clean locked build.
## Change
Require a trusted HTTPS DOC0 URL without embedded credentials, query or fragment, validate timeout bounds, and reject redirects when sending document bytes and the service credential. This client remains internal and requires independently verified tenant and project authorization.
## Validation
- 7 focused client tests passed; full suite 1,245 passed, 190 skipped; typecheck and lint passed (8 unrelated existing lint warnings).
- Local Next.js build passed with a copied existing dependency tree whose source lockfile differs; CI must verify a clean locked build.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Change
Require a trusted HTTPS DOC0 URL without embedded credentials, query or fragment, validate timeout bounds, and reject redirects when sending document bytes and the service credential. This client remains internal and requires independently verified tenant and project authorization.
Validation