{"docs":"https://docs.rendrd.io","scripts":["cdn.jsdelivr.net","cdnjs.cloudflare.com","unpkg.com","cdn.tailwindcss.com","esm.sh"],"styles":["cdn.jsdelivr.net","cdnjs.cloudflare.com","fonts.googleapis.com"],"fonts":["fonts.gstatic.com","cdn.jsdelivr.net"],"forms":["formsubmit.co","api.web3forms.com","formspree.io"],"videoEmbeds":["youtube.com","youtube-nocookie.com","vimeo.com","loom.com","wistia.net","wistia.com","dailymotion.com","player.twitch.tv"],"images":"Any https/http host, plus data: and blob: URIs.","inlineScripts":true,"inlineStyles":true,"runtimeFetch":false,"notes":["Pages must be self-contained HTML; reference CSS/JS only from the hosts above.","Forms have no backend here: post to a form-to-email service (FormSubmit, Web3Forms, Formspree) or download your HTML to host forms elsewhere.","Payment-card, CVV, bank/IBAN, national-ID, password and crypto-key fields are stripped at publish.","iframes are allowed only for video embeds from the listed platforms; other iframes, object and embed are removed.","Runtime network calls (fetch/XHR/WebSocket) are blocked, so pages that load data at runtime will not work."]}