You'll notice
Useful4 Signal3
Look-alike hostnames never reach the network approval prompt, so you can't approve one by mistake.
What's wrong with this entry?
Anonymous. No account, no email.
What
Before asking you to approve a sandboxed network connection, Claude Code checks whether the hostname changes when run through its confusable-character normalizer, which catches homograph and IDN spoofing. If it does, the prompt is not shown at all, so a look-alike host can never be approved by mistake.
Details
- Unconditional check on the sandbox network prompt path.
- Refusal is logged with a warning rather than surfaced as a normal denial dialog.
Evidence
Refusing to ask for a host srt would re-spell
Strings lifted out of the shipped bundle, so the claim above can be checked against them.