You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
Managed SettingsArea: what it touches
New FeaturesKind: in v2.1.232,
New FeaturesSection of the release
What
The gateway warns about two config shapes that used to fail invisibly.
Details
If any policy has a desktop overlay but listen.public_url is unset, it warns that origin pinning cannot be checked, so an origin-pinned value would be dropped by desktops with no sign of it.
If a policy sets sandbox.network.allowedDomains to an explicitly empty list, it warns that the derived coworkEgressAllowedHosts is not served at all, since desktops treat absent and empty the same.
Evidence
origin-pin hygiene is skipped at boot
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
