{"version":"2.1.251","anchor":"sandbox-host-allowances-refused-when-they-widen-into-a-wildc","canonical_anchor":"sandbox-host-allowances-refused-when-they-widen-into-a-wildc","heading":"Sandbox host allowances refused when they widen into a wildcard","tier":"notice","area":"Sandbox","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.251\/e\/sandbox-host-allowances-refused-when-they-widen-into-a-wildc","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.251","markdown":"### Sandbox host allowances refused when they widen into a wildcard\n\nSandbox network grants are refused when the host would expand into a wildcard match.\n\n**What**\n\nGranting a sandboxed session access to a network host now fails if that host, once normalized, spells out as a wildcard pattern. Claude Code logs a warning and declines rather than quietly allowing a much broader match than you asked for.\n\n**Details**\n\n- Runs on every session-level sandbox host grant; no flag turns it off.\n\n**Evidence**\n\n`Refusing a session grant for a host srt would re-spell as`\n\n- Area: Sandbox\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 2\/5"}