From 3676213528866eb6d64fe746ecb2b6582c63d431 Mon Sep 17 00:00:00 2001 From: juancarmore Date: Tue, 15 Sep 2026 20:29:33 +0200 Subject: [PATCH 1/3] Repair the heading outline of the server tutorials "Understanding the code" stepped from H2 to H4 in seven server tutorials; the endpoint headings are H3 now, matching the Go tutorial and the openvidu.io copies. Heading text is unchanged. --- docs/tutorials/application-server/dotnet.md | 4 ++-- docs/tutorials/application-server/java.md | 4 ++-- docs/tutorials/application-server/node.md | 4 ++-- docs/tutorials/application-server/php.md | 4 ++-- docs/tutorials/application-server/python.md | 4 ++-- docs/tutorials/application-server/ruby.md | 4 ++-- docs/tutorials/application-server/rust.md | 4 ++-- 7 files changed, 14 insertions(+), 14 deletions(-) diff --git a/docs/tutorials/application-server/dotnet.md b/docs/tutorials/application-server/dotnet.md index 8ae699e..9c4e188 100644 --- a/docs/tutorials/application-server/dotnet.md +++ b/docs/tutorials/application-server/dotnet.md @@ -107,7 +107,7 @@ Finally the application enables CORS support and the port where the application --- -#### Create token +### Create token The endpoint `/token` accepts `POST` requests with a payload of type `application/json`, containing the following fields: @@ -162,7 +162,7 @@ Finally, the returned token is sent back to the client. --- -#### Receive webhook +### Receive webhook The endpoint `/livekit/webhook` accepts `POST` requests with a payload of type `application/webhook+json`. This is the endpoint where LiveKit Server will send [webhook events :fontawesome-solid-external-link:{.external-link-icon}](https://openvidu.io/latest/docs/reference/webhooks/#events){:target="_blank"}. diff --git a/docs/tutorials/application-server/java.md b/docs/tutorials/application-server/java.md index b82d79b..b790c1a 100644 --- a/docs/tutorials/application-server/java.md +++ b/docs/tutorials/application-server/java.md @@ -79,7 +79,7 @@ Going deeper, the `Controller` class has the following fields: --- -#### Create token +### Create token The endpoint `/token` accepts `POST` requests with a payload of type `application/json`, containing the following fields: @@ -121,7 +121,7 @@ If required fields are available, a new JWT token is created. For that we use th --- -#### Receive webhook +### Receive webhook The endpoint `/livekit/webhook` accepts `POST` requests with a payload of type `application/webhook+json`. This is the endpoint where LiveKit Server will send [webhook events :fontawesome-solid-external-link:{.external-link-icon}](https://openvidu.io/latest/docs/reference/webhooks/#events){:target="_blank"}. diff --git a/docs/tutorials/application-server/node.md b/docs/tutorials/application-server/node.md index 41a6bd4..add5033 100644 --- a/docs/tutorials/application-server/node.md +++ b/docs/tutorials/application-server/node.md @@ -85,7 +85,7 @@ Finally the `express` application is initialized. CORS is allowed, JSON body par --- -#### Create token +### Create token The endpoint `/token` accepts `POST` requests with a payload of type `application/json`, containing the following fields: @@ -127,7 +127,7 @@ If required fields are available, a new JWT token is created. For that we use th --- -#### Receive webhook +### Receive webhook The endpoint `/livekit/webhook` accepts `POST` requests with a payload of type `application/webhook+json`. This is the endpoint where LiveKit Server will send [webhook events :fontawesome-solid-external-link:{.external-link-icon}](https://openvidu.io/latest/docs/reference/webhooks/#events){:target="_blank"}. diff --git a/docs/tutorials/application-server/php.md b/docs/tutorials/application-server/php.md index f2c3a40..74d79a8 100644 --- a/docs/tutorials/application-server/php.md +++ b/docs/tutorials/application-server/php.md @@ -79,7 +79,7 @@ The `index.php` file imports the required dependencies, sets the HTTP headers fo --- -#### Create token +### Create token The endpoint `/token` accepts `POST` requests with a payload of type `application/json`, containing the following fields: @@ -131,7 +131,7 @@ If required fields are available, a new JWT token is created. For that we use th --- -#### Receive webhook +### Receive webhook The endpoint `/livekit/webhook` accepts `POST` requests with a payload of type `application/webhook+json`. This is the endpoint where LiveKit Server will send [webhook events :fontawesome-solid-external-link:{.external-link-icon}](https://openvidu.io/latest/docs/reference/webhooks/#events){:target="_blank"}. diff --git a/docs/tutorials/application-server/python.md b/docs/tutorials/application-server/python.md index 78b8514..699df92 100644 --- a/docs/tutorials/application-server/python.md +++ b/docs/tutorials/application-server/python.md @@ -83,7 +83,7 @@ Finally the `Flask` application is initialized and CORS support is enabled. --- -#### Create token +### Create token The endpoint `/token` accepts `POST` requests with a payload of type `application/json`, containing the following fields: @@ -123,7 +123,7 @@ If required fields are available, a new JWT token is created. For that we use th --- -#### Receive webhook +### Receive webhook The endpoint `/livekit/webhook` accepts `POST` requests with a payload of type `application/webhook+json`. This is the endpoint where LiveKit Server will send [webhook events :fontawesome-solid-external-link:{.external-link-icon}](https://openvidu.io/latest/docs/reference/webhooks/#events){:target="_blank"}. diff --git a/docs/tutorials/application-server/ruby.md b/docs/tutorials/application-server/ruby.md index 639c627..fb3e4cf 100644 --- a/docs/tutorials/application-server/ruby.md +++ b/docs/tutorials/application-server/ruby.md @@ -86,7 +86,7 @@ Finally the application configures the port, sets the CORS configuration for Sin --- -#### Create token endpoint +### Create token endpoint The endpoint `/token` accepts `POST` requests with a payload of type `application/json`, containing the following fields: @@ -128,7 +128,7 @@ If required fields are available, a new JWT token is created. For that we use th --- -#### Receive webhook +### Receive webhook The endpoint `/livekit/webhook` accepts `POST` requests with a payload of type `application/webhook+json`. This is the endpoint where LiveKit Server will send [webhook events :fontawesome-solid-external-link:{.external-link-icon}](https://openvidu.io/latest/docs/reference/webhooks/#events){:target="_blank"}. diff --git a/docs/tutorials/application-server/rust.md b/docs/tutorials/application-server/rust.md index bdde686..5e69354 100644 --- a/docs/tutorials/application-server/rust.md +++ b/docs/tutorials/application-server/rust.md @@ -102,7 +102,7 @@ Then CORS support is enabled and the endpoints are defined. Finally the `axum` a --- -#### Create token endpoint +### Create token endpoint The endpoint `/token` accepts `POST` requests with a payload of type `application/json`, containing the following fields: @@ -181,7 +181,7 @@ If required fields are available, a new JWT token is created. For that we use th --- -#### Receive webhook +### Receive webhook The endpoint `/livekit/webhook` accepts `POST` requests with a payload of type `application/webhook+json`. This is the endpoint where LiveKit Server will send [webhook events :fontawesome-solid-external-link:{.external-link-icon}](https://openvidu.io/latest/docs/reference/webhooks/#events){:target="_blank"}. From 00b22a536d23755200e9cd91586ea49ca34bd066 Mon Sep 17 00:00:00 2001 From: juancarmore Date: Fri, 18 Sep 2026 12:56:49 +0200 Subject: [PATCH 2/3] Port the openvidu.io template hardening Escape the frontmatter values rendered in the head and the footer's previous/next titles: MkDocs' theme environment does not autoescape. Declare the referrer policy in its meta form, the only one GitHub Pages allows, and record the frame buster's known limit next to the code. The newsletter input gains an accessible name, and the form drops the Mailchimp validation hooks that have no script behind them, so native validation applies. --- overrides/main.html | 11 +++++++++-- overrides/partials/footer.html | 9 ++++----- 2 files changed, 13 insertions(+), 7 deletions(-) diff --git a/overrides/main.html b/overrides/main.html index 41b3110..7e36b84 100644 --- a/overrides/main.html +++ b/overrides/main.html @@ -14,7 +14,11 @@ The style is gated on an attribute rather than removed: navigation.instant diffs the and re-appends any tag the live head is missing, so a removed style would come back on every instant navigation with nothing to - remove it again — hiding the body. #} + remove it again — hiding the body. + Known limit: the