core/config: networking ssrf_assume_public_cidrs for fetch Fake-IP

This commit is contained in:
2026-07-24 20:20:30 +08:00
parent f3cefccefc
commit 0ca92dfd7e
11 changed files with 189 additions and 7 deletions
+7
View File
@@ -19,6 +19,13 @@
# enable = ["*"]
# disable = ["legacy"]
# Host network / SSRF policy for tools such as ``fetch``.
# Clash TUN + Fake-IP often resolves public names to 198.18.0.0/15; list that
# pool so fetch does not treat every site as private/loopback.
# Metadata (169.254.169.254) stays forbidden even if listed.
# [networking]
# ssrf_assume_public_cidrs = ["198.18.0.0/15"]
[agent]
# Persona (omit → built-in coding-agent line). tool_directives is the tool playbook.
# Override with multi-line literals (prefer ''' so nested " is fine):