Is it all the GUI under example.com/s?

I installed Mautic in a domain, let’s say it is example.com. But I noticed that when I try to login I am redirected to example.com/s/login and everything in the dashboard seems to be under /s/<something>.

I am considering to create some rules in my domain to force anyone visiting example.com/s/<whatever> to be connected from a trusted device, but I don’t want this rule to block API calls or any automation or function.

  1. Is it save to assume that everything after /s/ part of the GUI an won’t block any API calls or any automation or function?

  2. Is it save to assume that every part of the GUI will be locked if I lock all the URLs starting by example.com/s/ ?

1 Like