FullStory settings requests check default configuration fields.

Warning-only template checks for the pinned browser SDK default settings GET route, including rs fallback and preview. Configured or GCLB hosts, settings responses, bundle traffic and receiver acceptance remain outside this profile.

What this pack matches

Hosts: edge.fullstory.com, rs.fullstory.com
Paths: Full path expression: ^/s/settings/[^/]*/[^/]*/web$
Vendor docs: edge.fullstory.com/s/fs.js

Rules

Codes are stable. A finding in CI, MCP, or the playground lands on the same id.

Field	Required	What it checks	Rule ids	Source
`org_path`	recommended	The source inserts configured orgId into this opaque path slot. This is producer completeness, not organization issuance or acceptance. Presence diagnostic severity: warning. Value diagnostic severity: warning.	`vendor.fullstory-settings.param.org_path.missing` `vendor.fullstory-settings.param.org_path.empty`	docs
`version_path`	recommended	The source defaults version to v1. Nonempty future values remain open; no version enum is imposed. Presence diagnostic severity: warning. Value diagnostic severity: warning.	`vendor.fullstory-settings.param.version_path.missing` `vendor.fullstory-settings.param.version_path.empty`	docs
`method`	recommended	The pinned settings producer uses GET, including fallback and preview requests. Complete HTTP capture contract. Presence diagnostic severity: warning. Value diagnostic severity: warning.	`vendor.fullstory-settings.http.method.missing` `vendor.fullstory-settings.http.method.empty` `vendor.fullstory-settings.http.method.invalid`	docs

Validate a payload

pixellint validate url "$ARTIFACT" --rulepack vendor/fullstory-settings

Try this failing payload in the playground. An example with a validation finding.

https://edge.fullstory.com/s/settings//v1/web

cargo install pixellint · npm install pixellint