{"name":"deniedDomains","slug":"denieddomains","family":"setting","title":"Settings keys","noun":"settings key","description":"Sandbox domain lists now reject overly broad wildcard patterns like *.com","description_source":"entry","described_by":{"version":"2.1.268","anchor":"domain-pattern-validation-rejects-overly-broad-wildcards-for"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.322","builds":0,"mined_builds":161,"first_cited":null},"aliases":[],"entries":[{"version":"2.1.296","anchor":"sandbox-option-settings-merge","heading":"The sandbox option now merges with your settings instead of replacing them","line":"Sandbox options passed in now merge with your sandbox settings, deny lists add up, and failIfUnavailable defaults to true","released_at":"2026-10-09 16:58:10","reason":"found in this entry's text"},{"version":"2.1.284","anchor":"sandbox-denieddomains-matches-the-canonicalised-host","heading":"Sandbox blocked-website rules now catch other spellings of the same host","line":"`deniedDomains` rules now also match a host written another way, such as a different IP address spelling or a trailing dot","released_at":"2026-09-28 17:11:59","reason":"found in this entry's text"},{"version":"2.1.283","anchor":"sandbox-network-and-filesystem-grants-are-withheld-when-a-re","heading":"One invalid sandbox deny entry now withholds the matching allow rules","line":"If one entry in deniedDomains, denyWrite or denyRead is invalid, Claude Code now withholds the matching allow list instead of applying it","released_at":"2026-09-25 18:46:11","reason":"found in this entry's text"},{"version":"2.1.268","anchor":"domain-pattern-validation-rejects-overly-broad-wildcards-for","heading":"Domain-pattern validation rejects overly-broad wildcards for allowedDomains\/deniedDomains","line":"Sandbox domain lists now reject overly broad wildcard patterns like *.com","released_at":"2026-09-10 18:41:11","reason":"found in this entry's text, named in this entry"},{"version":"2.1.186","anchor":"network-strictallowlist-setting","heading":"Network strictAllowlist Setting","line":null,"released_at":"2026-06-22 18:03:48","reason":"found in this entry's text"},{"version":"2.1.186","anchor":"denieddomains-now-accepts-deny-all-wildcard","heading":"deniedDomains Now Accepts Deny-All Wildcard","line":null,"released_at":"2026-06-22 18:03:48","reason":"found in this entry's text"},{"version":"2.1.113","anchor":"network-denied-domains-configuration","heading":"Network Denied Domains Configuration","line":null,"released_at":"2026-04-17 19:09:22","reason":"found in this entry's text"}],"entries_total":7,"docs":[{"source":"claude-code","path":"agent-sdk\/python","title":"Agent SDK reference - Python","documented":false},{"source":"claude-code","path":"managed-settings","title":"Deploy managed settings","documented":false},{"source":"claude-code","path":"sandboxing","title":"Configure the sandboxed Bash tool","documented":false},{"source":"claude-code","path":"settings-reference","title":"All settings","documented":false},{"source":"claude-code","path":"tools-reference","title":"Tools reference","documented":false}],"docs_total":5,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/denieddomains","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}