docs: clarify network threat boundary in security policy#10503

Open

hi-ogawa wants to merge 7 commits into

vitest-dev:mainfrom

hi-ogawa:docs-tweak-security-md

Commits on Jun 2, 2026

docs: tweak SECURITY.md
hi-ogawa
committed

Commits on Jun 23, 2026

Merge branch 'main' into docs-tweak-security-md
hi-ogawa
authored
docs: clarify network threat boundary in security policy

hi-ogawa
and
OpenCode (claude-opus-4-8)
committed
docs: drop redundant origin/host validation hedges

hi-ogawa
and
OpenCode (claude-opus-4-8)
committed
docs: smooth carve-out wording

hi-ogawa
and
OpenCode (claude-opus-4-8)
committed
docs: cover reverse proxy and allowedHosts in network exposure carve-out

hi-ogawa
and
OpenCode (claude-opus-4-8)
committed
docs: drop allowedHosts from network exposure carve-out

hi-ogawa
and
OpenCode (claude-opus-4-8)
committed