{"version":"2.1.251","anchor":"sandbox-network-prompts-reject-lookalike-hostnames","canonical_anchor":"sandbox-network-prompts-reject-lookalike-hostnames","heading":"Sandbox network prompts reject lookalike hostnames","tier":"notice","area":"Sandbox","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.251\/e\/sandbox-network-prompts-reject-lookalike-hostnames","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.251","markdown":"### Sandbox network prompts reject lookalike hostnames\n\nSandbox network prompts refuse lookalike hostnames instead of creating a rule for them.\n\n**What**\n\nWhen a sandboxed process asks for network access, the prompt now refuses hosts whose spelling changes under international-domain normalization, the trick behind lookalike domain names. No permission rule is created and a warning is logged.\n\n**Details**\n\n- Unconditional in the sandbox ask callback, not behind a flag.\n- Companion to the same check on session-level host grants.\n\n**Evidence**\n\n`Refusing a sandbox network ask for a host srt would re-spell`\n\n- Area: Sandbox\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 2\/5"}