{"version":"2.1.248","anchor":"preview-pages-may-request-the-local-diagram-script-but-nothi","canonical_anchor":"preview-pages-may-request-the-local-diagram-script-but-nothi","heading":"Preview pages may request the local diagram script but nothing else new","tier":"notice","area":"Artifacts","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.248\/e\/preview-pages-may-request-the-local-diagram-script-but-nothi","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.248","markdown":"### Preview pages may request the local diagram script but nothing else new\n\nPreviewed pages may fetch the local diagram bundle; everything else off-origin is still refused.\n\n**What**\n\nThe check that stops previewed pages reaching the network now explicitly allows the diagram bundle path, provided it has no query string and is on the preview server's own origin. Everything else is still refused with \"Preview refuses network-reaching paths\".\n\n**Details**\n\n- The list of permitted remote path prefixes is now a plain array: `\/css`, `\/icon`, `\/earlyaccess\/`, `\/s\/`, `\/l\/`, `\/ea\/`.\n- Preview remains gated overall; when the gate helper returns false the decision is a denial with reason \"Preview gate closed at schema freeze\".\n\n**Evidence**\n\n`[\"\/css\", \"\/icon\", \"\/earlyaccess\/\", \"\/s\/\", \"\/l\/\", \"\/ea\/\"]`\n\n- Area: Artifacts\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 2\/5"}