From 52fb970337ccc5c2824dba92c0c4697b9ae970ef Mon Sep 17 00:00:00 2001
From: AliMahmoudDev <127209252+AliMahmoudDev@users.noreply.github.com>
Date: Wed, 3 Jun 2026 17:24:13 +0000
Subject: [PATCH] fix: replace mywebsite.com with example.com per RFC 2606

Fixes #2002
---
 content/includes/waf/policy.html | 2 +-
 data/nap-waf/schema/policy.json  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/includes/waf/policy.html b/content/includes/waf/policy.html
index fd33d16ee1..bdf88bb4d4 100644
--- a/content/includes/waf/policy.html
+++ b/content/includes/waf/policy.html
@@ -5330,7 +5330,7 @@ <h2 id="policy/urls">urls</h2>
 <tr class="odd">
 <td><code>allowRenderingInFramesOnlyFrom</code></td>
 <td>string</td>
-<td>Specifies that the browser may load the frame or iframe from a specified domain. Type the protocol and domain in URL format for example, <a href="http://www.mywebsite.com">http://www.mywebsite.com</a>. Do not enter a sub-URL, such as <a href="http://www.mywebsite.com/index">http://www.mywebsite.com/index</a>.</td>
+<td>Specifies that the browser may load the frame or iframe from a specified domain. Type the protocol and domain in URL format for example, <a href="http://www.example.com">http://www.example.com</a>. Do not enter a sub-URL, such as <a href="http://www.example.com/index">http://www.example.com/index</a>.</td>
 <td></td>
 </tr>
 <tr class="even">
diff --git a/data/nap-waf/schema/policy.json b/data/nap-waf/schema/policy.json
index 8ec2c20c87..d8b30b52c8 100644
--- a/data/nap-waf/schema/policy.json
+++ b/data/nap-waf/schema/policy.json
@@ -4056,7 +4056,7 @@
                               "type" : "string"
                            },
                            "allowRenderingInFramesOnlyFrom" : {
-                              "description" : "Specifies that the browser may load the frame or iframe from a specified domain. Type the protocol and domain in URL format for example, http://www.mywebsite.com. Do not enter a sub-URL, such as http://www.mywebsite.com/index.",
+                              "description" : "Specifies that the browser may load the frame or iframe from a specified domain. Type the protocol and domain in URL format for example, http://www.example.com. Do not enter a sub-URL, such as http://www.example.com/index.",
                               "type" : "string"
                            },
                            "attackSignaturesCheck" : {