You'll noticeTier: how much it should matter to you
4Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
SandboxArea: what it touches
New FeaturesKind: in v2.1.251,
What probably matters to youSection of the release
What
Before asking you to approve a sandboxed network connection, Claude Code checks whether the hostname changes when run through its confusable-character normalizer, which catches homograph and IDN spoofing. If it does, the prompt is not shown at all, so a look-alike host can never be approved by mistake.
Details
Unconditional check on the sandbox network prompt path.
Refusal is logged with a warning rather than surfaced as a normal denial dialog.
Evidence
Refusing to ask for a host srt would re-spell
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
