An empty allowedDomains list no longer produces an empty egress allowlist; you get a warning.
What's wrong with this entry?
Setting sandbox.network.allowedDomains to an empty array in managed policy no longer derives an empty desktop egress allowlist; the derived value is skipped and a warning tells the admin to either remove the key or list the domains.
- The derivation of
coworkEgressAllowedHostsnow requires the array to be non-empty. Previously the empty array was passed straight through.
coworkEgressAllowedHosts
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.219
New sandbox setting: network.strictAllowlist
Both mention sandbox network allowed domain