# isSafeEndpointUrl

**Kind:** Function

**Source:** [`atloria-monorepo/packages/ui-core/src/components/api-explorer/oauth2.ts`](https://github.com/sherkety/atloria/blob/main/atloria-monorepo/packages/ui-core/src/components/api-explorer/oauth2.ts#L118)

An https URL, or http on a loopback host.

The loopback exception is what makes a customer's own dev authorization server usable from a
local docs preview; every other http endpoint would put an authorization code — and then a
token — on the wire in clear text, so it is refused rather than downgraded silently.

## Signature

```ts
function isSafeEndpointUrl(url: string | undefined): boolean
```

## Parameters

| Name | Type |
|---|---|
| `url` | `string | undefined` |

**Returns:** `boolean`