The InboxPoller now validates sandbox permission requests and team permission updates more strictly, logging warnings for malformed data rather than potentially crashing:
- Validates that
hostPattern.hostexists on sandbox permission requests - Validates that
permissionUpdate.rulesandpermissionUpdate.behaviorexist on team permission updates
Evidence
Validation messages (search for "[InboxPoller] Invalid sandbox permission request")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.