Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

docs: clarify proxy threat model#5530

Merged
mcollina merged 1 commit into
mainnodejs/undici:mainfrom
docs/proxy-threat-modelnodejs/undici:docs/proxy-threat-modelCopy head branch name to clipboard
Jul 9, 2026
Merged

docs: clarify proxy threat model#5530
mcollina merged 1 commit into
mainnodejs/undici:mainfrom
docs/proxy-threat-modelnodejs/undici:docs/proxy-threat-modelCopy head branch name to clipboard

Conversation

@mcollina

@mcollina mcollina commented Jul 8, 2026

Copy link
Copy Markdown
Member

This relates to...

N/A

Rationale

Clarify the security threat model for proxy use and internal network deployments.

Changes

  • State that internal/private network environments are trusted for traffic privacy.
  • Clarify that configured proxies are trusted, authorized intermediaries for routing traffic, such as through a firewall.
  • Document that anonymity, traffic hiding, and bypassing organizational, regulatory, or legal controls are non-goals.
  • Add unauthorized or untrusted proxy usage as a non-vulnerability/deployment responsibility.

Features

N/A

Bug Fixes

N/A

Breaking Changes and Deprecations

N/A

Status

Tested with git diff --check -- SECURITY.md; commit hook also ran npm run lint.

Signed-off-by: Matteo Collina <hello@matteocollina.com>
@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.44%. Comparing base (838b6cd) to head (7ee41b6).
⚠️ Report is 14 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #5530      +/-   ##
==========================================
+ Coverage   93.43%   93.44%   +0.01%     
==========================================
  Files         110      110              
  Lines       37278    37329      +51     
==========================================
+ Hits        34829    34883      +54     
+ Misses       2449     2446       -3     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@mcollina
mcollina merged commit c7c7e7f into main Jul 9, 2026
36 checks passed
@mcollina
mcollina deleted the docs/proxy-threat-model branch July 9, 2026 16:54
@github-actions github-actions Bot mentioned this pull request Jul 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

Morty Proxy This is a proxified and sanitized view of the page, visit original site.