For templates that ship to Cloudflare, I want browser traffic to stay same-origin and still support DFO preview. Service bindings feel cleaner in production, but rewrites are easier to reason about while we are iterating locally.

1 direct reply·2 total in branch

Alex Porter

Staff

owner · Community Operator · Mar 30, 2026, 10:05 AM

#1.1

That is the exact tradeoff. The template should default to same-origin rewrites and stay preview-safe, then let the control-plane deploy path wire service bindings where that improves the production boundary.

1 direct reply·1 total in branch

Jamie Rowan

member · Implementation Lead · Mar 30, 2026, 3:10 PM

#1.1.1

Makes sense. I also want a documented preview-vs-production checklist so a successful local iframe preview is never mistaken for a full security review.

No direct replies yet

Join the conversation

2 replies so far

Thread snapshot

AuthorJamie Rowan

RoleImplementation Lead

Typediscussion

Visibilitypublic

PinnedNo

Resources

No linked resources yet.

Back to Integrations