{"version":"2.1.251","anchor":"worker-forwarded-network-asks-get-the-same-spoofing-check","canonical_anchor":"worker-forwarded-network-asks-get-the-same-spoofing-check","heading":"Worker-forwarded network asks get the same spoofing check","tier":"notice","area":"Sandbox","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.251\/e\/worker-forwarded-network-asks-get-the-same-spoofing-check","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.251","markdown":"### Worker-forwarded network asks get the same spoofing check\n\nNetwork asks forwarded to a worker get the same hostname spoofing check first.\n\n**What**\n\nWhen a sandbox network-permission question is handed off to a worker rather than prompted locally, the host now goes through the same round-trip spelling check first, and the ask is denied instead of forwarded if the host would come back different.\n\n**Details**\n\n- Runs unconditionally on the worker-forwarding path, and logs a warning on refusal.\n\n**Evidence**\n\n`Refusing to forward a worker ask for a host srt would re-spell`\n\n- Area: Sandbox\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 2\/5"}