What
When a request is refused by a network proxy allowlist, Claude Code now recognises the block from either of two response headers, so more environments get the proper "blocked by egress policy" handling instead of a generic HTTP 403.
Details
- An HTTP 403 counts as blocked when
x-proxy-errorisblocked-by-allowlistor when the newx-deny-reasonheader ishost_not_allowed. - Previously only the first header was checked, and only at the GitHub comments call site; the check is now a shared helper.
Evidence
host_not_allowed
Strings lifted out of the shipped bundle, so the claim above can be checked against them.