Backend, Data & Security Core A1 · Official standard Platform: Web

Uniform Resource Locator

A URL is a network address. Its scheme, host, path, query, and fragment tell clients what to open.

See how it works
You might call it web addressresource locatorURI reference

See how it works

Original worked exampleURL

Another example

An invoice link uses a stable path and query. A fragment jumps to the disputed line item.

Main parts

  1. 01Originating request
  2. 02Resolution or processing hop
  3. 03Response, timing, and failure

Use it when

Make URLs stable and shareable. Use clear encoding, one main URL, and proper access checks.

Do not use it when

Never place secrets in URLs or use fragments for server data. Add redirects before changing public paths.

Name used in code

scheme://host/path?query#fragment

Before you ship

Check contracts and invariants, authorization, and input limits. Test retries, one-time effects, timeouts, and partial failures. Verify data integrity, compatibility, monitoring, recovery, and rollback.

Request you can copy

Outcome: Design or review URL for this system while keeping data correct, secure, and easy to operate. User context: An invoice link uses a stable path and query. A fragment jumps to the disputed line item. Technical concept or control: URL. Why it fits: Make URLs stable and shareable. Use clear encoding, one main URL, and proper access checks. Do not use it when: Never place secrets in URLs or use fragments for server data. Add redirects before changing public paths. Engineering requirements: Define inputs, outputs, contracts, and rules that must always hold. Set authorization and input checks. Define failures, timeouts, retries, one-time effects, data moves, and compatibility limits. Operations: Add useful signals and logs that hide sensitive data. Set capacity limits and write an operator guide. Test recovery and rollback. Acceptance criteria: Contract and failure-path tests pass. Data and authorization rules still hold during retries and partial failures. Check performance limits, monitoring, recovery, and rollback. Evidence and limits (evidence boundary): The standard covers only the listed scope. It does not choose the visual style, product decision, or Vibulary example. Unknowns to confirm: Where the code runs, data stores, traffic shape, consistency needs, and the security boundary. Also confirm the compatibility period, service goals, and rollback limits.

Check this request

Review the current use of URL. Definition: A URL is a network address. Its scheme, host, path, query, and fragment tell clients what to open. Release checks: Check contracts and invariants, authorization, and input limits. Test retries, one-time effects, timeouts, and partial failures. Verify data integrity, compatibility, monitoring, recovery, and rollback. Before changing code, report the evidence you found, gaps, severity, and the smallest safe fix.

A1
How official is this term?

Official standard

A named standard sets the rules described on this page.

The standard covers only the listed scope. It does not choose the visual style, product decision, or Vibulary example.

Scope
Web URLs
Document status
living standard
Checked on
2026-07-30

Evidence sources & scope

Authority source + Term reference · WHATWG · living standard URL Living Standard — URL representation URL representation Scope: Web URLs; direct scope: URL representation Role here: Direct term reference Source covers: canonical name, definition, semantics, implementation Authority source · WHATWG · living standard URL Living Standard Scope: Web URLs Role here: Authority within stated scope Source covers: canonical name, definition, semantics, implementation

Copy it yourself

The browser could not copy this. Select the request below and copy it yourself.