Docs: clarify live mode development scope (#753)

Document the local-development boundary and route production inspection to URL detection or the extension. Keep manual CSP allowances development-only. Related to #539.

AI assistance: Codex, under maintainer direction.
This commit is contained in:
Paul Bakaus
2026-09-06 16:20:27 -07:00
committed by GitHub
parent f64da20b07
commit dfb33f7d57
3 changed files with 10 additions and 0 deletions
+2
View File
@@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu
## CSP detection (first-time only)
Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives.
If `config.cspChecked === true`, skip this whole section; the user was already asked once.
```bash