docs(skill): document --allow-private-network for local fetches
A local http://127.0.0.1:N fetch is blocked by the default SSRF gate and fails with "Access to private/internal IP address 127.0.0.1 is not allowed". The capture section did not mention the global --allow-private-network flag, which is easy to misread as a bug when targeting a local fixture or dev server. Added one sentence; no behavior change.
This commit is contained in:
@@ -73,6 +73,10 @@ Use `--dump original` for a binary or raw HTTP response that should bypass DOM
|
||||
and JavaScript processing. Use `scrape` for many URLs when the requested output
|
||||
does not require one screenshot per URL.
|
||||
|
||||
A local `http://127.0.0.1:N` needs the global `--allow-private-network`, which
|
||||
unblocks loopback, RFC1918 and link-local; without it the fetch fails with
|
||||
`Access to private/internal IP address 127.0.0.1 is not allowed`.
|
||||
|
||||
## Drive CDP
|
||||
|
||||
Start the server:
|
||||
|
||||
Reference in New Issue
Block a user