You'll notice
Useful3 Signal2
Sandbox network prompts refuse lookalike hostnames instead of creating a rule for them.
What's wrong with this entry?
Anonymous. No account, no email.
What
When a sandboxed process asks for network access, the prompt now refuses hosts whose spelling changes under international-domain normalization, the trick behind lookalike domain names. No permission rule is created and a warning is logged.
Details
- Unconditional in the sandbox ask callback, not behind a flag.
- Companion to the same check on session-level host grants.
Evidence
Refusing a sandbox network ask for a host srt would re-spell
Strings lifted out of the shipped bundle, so the claim above can be checked against them.