{"version":"2.1.260","anchor":"hostedhybrid-managed-config-validation-hardened-against-cre","canonical_anchor":"hostedhybrid-managed-config-validation-hardened-against-cre","heading":"Hosted\/hybrid managed-config validation hardened against credential leakage and unbounded arrays","tier":"internal","area":"Admin Settings","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.260\/e\/hostedhybrid-managed-config-validation-hardened-against-cre","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.260","markdown":"### Hosted\/hybrid managed-config validation hardened against credential leakage and unbounded arrays\n\nManaged config validation now rejects entries that look like they leak credentials.\n\nManaged-config validation for the hosted control plane (hybrid channel) now rejects entries that look like they contain a credential header, that carry disallowed query strings or fragments on base URLs, or that exceed array-length bounds. Rejected entries are not stored, and the error points admins to a helper script instead.\n\n- Area: Admin Settings\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 1\/5"}