A fixed list of allowed hosts covering GitHub, npm, PyPI and Anthropic domains exists but nothing uses it.
A frozen host allowlist with a size cap and host pattern is defined and referenced nowhere in the build.
What's wrong with this entry?
A new module defines a frozen list of hosts, covering GitHub and its api/codeload/raw/objects variants, pypi.org, files.pythonhosted.org, registry.npmjs.org, anthropic.com, claude.ai, claude.com and ant.dev, along with a size cap and a host-character pattern. Nothing in this build references any of it, so it has no effect today and reads as groundwork.
"files.pythonhosted.org"
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.236
macOS sandbox re-applies read and delete denials inside writable folders
Both mention sandbox
-
v2.1.236
Sandbox proxy no longer writes to sockets that have gone away
Both mention sandbox
-
v2.1.236
IPv6 hosts through the proxy
Both mention sandbox