Sandbox diagnostics warn when an IPv6 host in a rule is missing square brackets.
What's wrong with this entry?
Sandbox diagnostics now flag permission rules that name an IPv6 address without square brackets, both for domain rules and for injected hosts, so a rule that silently fails to match gets called out.
- Two new checks, one for domains and one for inject hosts; the existing Linux glob-pattern warning summary now shares a common formatter.
getUnbracketedIpv6DomainWarnings
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.236
macOS sandbox re-applies read and delete denials inside writable folders
Both mention sandbox
-
v2.1.236
Sandbox proxy no longer writes to sockets that have gone away
Both mention sandbox
-
v2.1.236
IPv6 hosts through the proxy
Both mention sandbox