claude doctor now flags badly written IPv6 entries in your sandbox network rules.
What's wrong with this entry?
claude doctor now flags unbracketed or non-canonical IPv6 addresses in allow and deny network domain entries, and credential injectHosts entries that can never match their destination because they are bracketed, carry a zone id, or are not canonically compressed. Each says to rewrite the entry as the bare, canonically-compressed address.
Sandbox credential injectHosts entries can never match their destination
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.221
claude doctorreports sandbox credential-mask problemsBoth mention doctor sandbox