After you configure content exclusion, what does the client send so that the server can return the right policy?
Why C is the answer
The current repository URL
The client sends the repository URL, and GitHub says these URLs are not logged anywhere.
In detail
- The client sends the current repository URL.
- The server then returns the policy for that repository.
- Excluded file contents are not what gets sent.
Use case
An illustrative scenario, not a real incident.
After exclusions are configured, a client opens a repository. It sends the repository URL, and the server returns the policy for that repository.
See it in different ways
stateDiagram-v2 [*] --> Excluded Excluded --> Respected: inline suggestions and chat Excluded --> NotSupported: Edit and Agent modes Excluded --> NotGuaranteed: third-party MCP servers Excluded --> Indirect: IDE semantic information
sequenceDiagram participant P0 as Client participant P1 as GitHub server P0->>P1: Current repository URL P1-->>P0: Exclusion policy
Key point: The repository URL finds the policy.
Why the other options are wrong
- A. Your personal access token for each repository
- It does not send tokens for each repository.
- B. The full contents of every excluded file
- Excluded file contents are the very thing not to send.
- D. A list of all of the open editor tabs
- Open tabs are not how the policy is found.

