{"version":"2.1.229","anchor":"ipv6-addresses-in-sandbox-network-rules-must-be-bracketed","canonical_anchor":"ipv6-addresses-in-sandbox-network-rules-must-be-bracketed","heading":"IPv6 addresses in sandbox network rules must be bracketed","tier":"use","area":"Sandbox","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.229\/e\/ipv6-addresses-in-sandbox-network-rules-must-be-bracketed","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.229","markdown":"### IPv6 addresses in sandbox network rules must be bracketed\n\nWrite IPv6 addresses in sandbox rules in bracketed, canonical form or enforcement gets conservative.\n\n**What**\n\nSandbox `domain` and `injectHosts` entries are now normalized and checked for bracketed IPv6 spellings, ports and canonical form. Entries with unreliable spellings still work, but enforcement becomes conservative: it denies at least what any readable interpretation denies, and allow rules never widen.\n\n**Details**\n\n- Problem entries are collected and surfaced as doctor issues rather than failing startup.\n\n**Evidence**\n\n`Sandbox network domain entries have unreliable spellings`\n\n- Area: Sandbox\n- Names: `domain`, `injectHosts`\n- Tier: Use it now\n- Useful: 3\/5\n- Signal: 2\/5"}