diff --git a/docs/redirects.yaml b/docs/redirects.yaml index c3a13f302..7ea1d9550 100644 --- a/docs/redirects.yaml +++ b/docs/redirects.yaml @@ -1,9 +1,10 @@ # Readthedocs redirects # See https://docs.readthedocs.io/en/stable/user-defined-redirects.html # -# In order to prevent exposing the API token, PR jobs do not update the -# redirects - changes to this file are only applied when they are merged -# into the main branch. +# Changes to this file do not take effect until they are merged into the +# 'development' branch. This is because the API token (RTD_TOKEN) is not +# made available in PR jobs - preventing bad actors from crafting PRs to +# expose it. - type: exact from_url: /projects/api/en/latest/$rest