Docs: Add allowedHosts core config option

[ghengeveld]

What I did

Added configuration snippet and documentation for allowedHosts in Storybook core settings. See #33835

Summary by CodeRabbit

Documentation

• Added comprehensive documentation and configuration examples for the allowed hosts feature, enabling developers to configure which hosts can access the development server. Includes examples spanning React, Vue, Angular, and web-components frameworks, with both standard and typed configuration methods, plus various modern CSF setup patterns.

[coderabbitai]

📝 Walkthrough

Walkthrough

Adds documentation and multiple example snippets for a new main config property core.allowedHosts (type string[] | true), and documents its purpose, default, and usage in the API reference.

Changes

Cohort / File(s)	Summary
allowedHosts doc + snippets docs/_snippets/main-config-core-allowed-hosts.md, docs/api/main-config/main-config-core.mdx	Adds `core.allowedHosts?: string[]

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• #33835: Implements allowedHosts handling and origin validation in the dev server used by this documentation.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[kylegach]

Thanks for handling this!

[coderabbitai]

🧹 Nitpick comments (1)

docs/_snippets/main-config-core-allowed-hosts.md (1)

27-53: Minor inconsistency in property ordering between React snippets.

The React TypeScript CSF Next snippet (lines 31-37) has stories before framework, while the React JavaScript CSF Next snippet (lines 46-52) has framework before stories. For consistency with the other snippets and maintainability, consider aligning the property order.

Suggested fix for property order consistency

 export default defineMain({
-  stories: ['../src/**/*.mdx', '../src/**/*.stories.@(js|jsx|mjs|ts|tsx)'],
   framework: '@storybook/your-framework',
+  stories: ['../src/**/*.mdx', '../src/**/*.stories.@(js|jsx|mjs|ts|tsx)'],
   core: {
     allowedHosts: ['storybook.example.local'],
   },
 });

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In `@docs/_snippets/main-config-core-allowed-hosts.md` around lines 27 - 53, The
two CSF Next snippets export the same defineMain configuration but have
inconsistent property order: in the object passed to defineMain the TypeScript
snippet lists stories before framework while the JavaScript snippet lists
framework before stories; update the JavaScript snippet so the exported object
uses the same ordering as the TypeScript one (put stories before framework) in
the default export passed to defineMain to maintain consistency across examples.

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Nitpick comments:
In `@docs/_snippets/main-config-core-allowed-hosts.md`:
- Around line 27-53: The two CSF Next snippets export the same defineMain
configuration but have inconsistent property order: in the object passed to
defineMain the TypeScript snippet lists stories before framework while the
JavaScript snippet lists framework before stories; update the JavaScript snippet
so the exported object uses the same ordering as the TypeScript one (put stories
before framework) in the default export passed to defineMain to maintain
consistency across examples.

---

ℹ️ Review info

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between f5e65ec and 506c0cd.

📒 Files selected for processing (2)

• docs/_snippets/main-config-core-allowed-hosts.md
• docs/api/main-config/main-config-core.mdx