{"version":"2.1.251","anchor":"network-approval-prompts-refuse-look-alike-hostnames","canonical_anchor":"network-approval-prompts-refuse-look-alike-hostnames","heading":"Network approval prompts refuse look-alike hostnames","tier":"notice","area":"Sandbox","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.251\/e\/network-approval-prompts-refuse-look-alike-hostnames","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.251","markdown":"### Network approval prompts refuse look-alike hostnames\n\nLook-alike hostnames never reach the network approval prompt, so you can't approve one by mistake.\n\n**What**\n\nBefore asking you to approve a sandboxed network connection, Claude Code checks whether the hostname changes when run through its confusable-character normalizer, which catches homograph and IDN spoofing. If it does, the prompt is not shown at all, so a look-alike host can never be approved by mistake.\n\n**Details**\n\n- Unconditional check on the sandbox network prompt path.\n- Refusal is logged with a warning rather than surfaced as a normal denial dialog.\n\n**Evidence**\n\n`Refusing to ask for a host srt would re-spell`\n\n- Area: Sandbox\n- Tier: You'll notice\n- Useful: 4\/5\n- Signal: 3\/5"}