docs: clarify browser allowlist defaults and risks

This commit is contained in:
Peter Steinberger
2026-01-11 01:55:38 +01:00
parent a32021dc3e
commit fe46a2663b
3 changed files with 11 additions and 0 deletions

View File

@@ -1471,6 +1471,7 @@ Allowlists for remote control:
- `allowedControlUrls`: exact control URLs permitted for `target: "custom"`.
- `allowedControlHosts`: hostnames permitted (hostname only, no port).
- `allowedControlPorts`: ports permitted (defaults: http=80, https=443).
Defaults: all allowlists are unset (no restriction). `allowHostControl` defaults to false.
### `models` (custom providers + base URLs)