{"version":"2.1.251","anchor":"sandbox-network-requests-are-checked-against-the-worker-that","canonical_anchor":"sandbox-network-requests-are-checked-against-the-worker-that","heading":"Sandbox network requests are checked against the worker that sent them","tier":"notice","area":"Sandbox","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.251\/e\/sandbox-network-requests-are-checked-against-the-worker-that","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.251","markdown":"### Sandbox network requests are checked against the worker that sent them\n\nSandbox network requests are dropped unless the worker asking matches the sender.\n\n**What**\n\nA request to open network access from inside the sandbox is now dropped unless the worker name in the request matches the teammate who sent the message. Requests missing a host or worker name, or carrying non-text values for them, are also dropped. This closes a path where one worker could ask for network access in another's name.\n\n**Evidence**\n\n`workerName ${S(wo.workerName)} does not match sender`\n\n- Area: Sandbox\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 3\/5"}