Rejected hosts in network permission rules now come with a plain-language reason.
What's wrong with this entry?
When a host or URL cannot be used as the target of a network permission rule, Claude Code now explains why in plain language instead of just refusing.
- Three reasons are produced: the value contains a wildcard, described as "a wildcard, which srt matches against every host"; it contains unsafe whitespace or control characters; or it is "longer than a hostname can be".
- The validation helper runs unconditionally when a rule host is parsed.
longer than a hostname can be
Strings lifted out of the shipped bundle, so the claim above can be checked against them.