Write IPv6 addresses in sandbox rules in bracketed, canonical form or enforcement gets conservative.
What's wrong with this entry?
Sandbox domain and injectHosts entries are now normalized and checked for bracketed IPv6 spellings, ports and canonical form. Entries with unreliable spellings still work, but enforcement becomes conservative: it denies at least what any readable interpretation denies, and allow rules never widen.
- Problem entries are collected and surfaced as doctor issues rather than failing startup.
Sandbox network domain entries have unreliable spellings
Strings lifted out of the shipped bundle, so the claim above can be checked against them.