The http_request tool unconditionally blocked all private/LAN hosts with no opt-out, preventing legitimate use cases like calling a local Home Assistant instance or internal APIs. This adds an `allow_private_hosts` config flag (default: false) under `[http_request]` that, when set to true, skips the private-host SSRF check while still enforcing the domain allowlist. Closes #3568 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| mod.rs | ||
| schema.rs | ||
| traits.rs | ||