Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial
HomeReleasesv2.1.219entry #20

Claude Code v2.1.219 ·

New sandbox setting: network.strictAllowlist

Set strictAllowlist to have the sandbox flat-out deny hosts outside your allowed domains instead of prompting.

Use it now Notable New Features
JSON All of v2.1.219
Use it nowTier: how much it should matter to you
4Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
SandboxArea: what it touches
New FeaturesKind: in v2.1.219,
What probably matters to youSection of the release
What

A strictAllowlist boolean on sandbox network settings makes the sandbox runtime deny hosts outside allowedDomains outright instead of prompting. The runtime check existed before but there was no way to turn it on.

Details
  • Added to the sandbox network settings schema and propagated through settings merging (if (o.strictAllowlist === !0) l.strictAllowlist = !0;), derived from any of user, managed or CLI settings
  • The runtime permission check is if (!r || Hl.network.strictAllowlist); a host matching no rule is denied rather than prompted when this is on
  • Honoured only from user, managed/policy or --settings sources; per its own description project settings (.claude/settings.json and .claude/settings.local.json) are ignored
  • Described as "Enforced for sandboxed commands only"; in-process tools such as WebFetch are not gated by it
  • Absent by default, so behaviour is unchanged unless configured
Usage
{"sandbox":{"network":{"allowedDomains":["api.example.com"],"strictAllowlist":true}}}
Evidence

the sandbox runtime deterministically denies hosts not in allowedDomains instead of prompting, When true, the sandbox runtime deterministically denies hosts not in allowedDomains instead of prompting.

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Read from
Names in the bundlesandbox.network.strictAllowlistallowedDomains--settings
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agreeAdded sandbox.network.strictAllowlist setting to deny non-allowlisted hosts for sandboxed commands without prompting

See this entry in the whole of v2.1.219 →

Feedback