Nothing to try yet Notable
The sandbox can now inject a Java proxy agent so JVM processes get network isolation too.
The sandbox wrapper can now optionally pass a javaAgentJarPath to the macOS and Linux sandbox builders, pointing JVMs started inside the sandbox at the proxy via a Java agent built from a vendored java-proxy-agent jar. This enables network isolation for JVM processes running under the sandbox.