diff --git a/custom/conf/app.example.ini b/custom/conf/app.example.ini
index 08b12ee4891..06d1bf9076f 100644
--- a/custom/conf/app.example.ini
+++ b/custom/conf/app.example.ini
@@ -2803,7 +2803,8 @@ LEVEL = Info
 ;BLOCKED_DOMAINS =
 ;;
 ;; Allow private addresses defined by RFC 1918, RFC 1122, RFC 4632 and RFC 4291 (false by default)
-;; If a domain is allowed by ALLOWED_DOMAINS, this option will be ignored.
+;; When false, migration URLs are rejected if any resolved address is private or loopback,
+;; even when the host matches ALLOWED_DOMAINS: the block list is applied before the allow list.
 ;ALLOW_LOCALNETWORKS = false
 
 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;