The sandbox proxy now logs each denied request with its method, URL and reason.
What's wrong with this entry?
The sandbox's HTTPS proxy now logs each denied request with its method, URL and the reason it was denied, so a blocked network call is traceable rather than silently failing.
- The proxy takes a denial callback; the log message is assembled at the time of the denial.
- When an incoming request has a body but the outgoing headers ended up with neither
content-lengthnortransfer-encoding, the proxy setstransfer-encoding: chunkedso the body is still framed correctly. - If either side of the connection died while the request filter was running, the proxy now tears the connection down cleanly.
onFilterRequestDenied
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.236
macOS sandbox re-applies read and delete denials inside writable folders
Both mention sandbox
-
v2.1.236
Sandbox proxy no longer writes to sockets that have gone away
Both mention sandbox
-
v2.1.236
IPv6 hosts through the proxy
Both mention sandbox