From 1af9b9ddf69cc7215d10e2f0713123756b36077b Mon Sep 17 00:00:00 2001
From: Mohamed Bassem <me@mbassem.com>
Date: Fri, 2 Jan 2026 23:50:43 +0000
Subject: chore: add a note about hostname allowlists in the validation error
 message

---
 apps/workers/network.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'apps/workers')

diff --git a/apps/workers/network.ts b/apps/workers/network.ts
index 0dc46da4..4bc30562 100644
--- a/apps/workers/network.ts
+++ b/apps/workers/network.ts
@@ -163,7 +163,7 @@ export async function validateUrl(
     if (isAddressForbidden(hostname)) {
       return {
         ok: false,
-        reason: `Refusing to access disallowed IP address ${hostname} (requested via ${parsedUrl.toString()})`,
+        reason: `Refusing to access disallowed IP address ${hostname} (requested via ${parsedUrl.toString()}). You can use CRAWLER_ALLOWED_INTERNAL_HOSTNAMES to allowlist specific hostnames for internal access.`,
       } as const;
     }
     return { ok: true, url: parsedUrl } as const;
-- 
cgit v1.2.3-70-g09d2