docs: sync docs-ui proxy loopback bypass after #203 - #204
Merged
Conversation
src/nodepilot-docs-ui/content/ai-features.md — proxy section was missing the loopback bypass guarantee introduced in #203: loopback targets (localhost, 127.0.0.0/8, ::1) always bypass the configured proxy so prompt and API key do not leave the host unencrypted. Root docs/ai-features.md already documents this; this commit closes the drift on the docs-ui copy.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What & why
PR #203 added a security guarantee: LLM loopback targets (
localhost,127.0.0.0/8,::1) always bypass the configured outbound proxy so prompt and API key never leave the host unencrypted. Rootdocs/ai-features.mdwas updated with this fact, but the docs-site copy (src/nodepilot-docs-ui/content/ai-features.md) was only updated to say HTTP is allowed for loopback — the "these targets bypass the proxy" guarantee was missing from its outbound-proxy section.How
Added two sentences to the "Ausgehender Proxy" section of the docs-ui copy, immediately after the proxy settings table and before the existing "Zu beachten" note, mirroring the text already in root
docs/ai-features.md:Testing
Docs-only change — no code, no tests to run.
dotnet test(affected backend suites) greennpm run test:run(affected specs) /npm run lint:cigreen (if frontend touched)Checklist
main; no direct commits tomainGenerated by Claude Code