Sandbox domain lists now reject overly broad wildcard patterns like *.com
Entries in allowedDomains and deniedDomains (the sandbox's network allow/deny lists) must now be a real domain name, a single-level wildcard like *.example.com, localhost, or a bracketed IPv6 address. Overly broad patterns such as a bare * or *.com are rejected for allowedDomains; deniedDomains still allows a bare * since that means "deny everything".
This prevents an accidentally or intentionally overbroad allow rule from opening network access far wider than intended, closing off a class of overly permissive sandbox configurations.
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
A per-command list widens only what the sandbox denies by default. [`deniedDomains`](/docs/en/settings-reference#sandbox-network-denieddomains) entries still block. When [`strictAllowlist`](/docs/en/settings-reference#sandbox-network-stric…sandboxing see the edit
| Lists | Combines entries from every source | [`permissions.allow`](#permissions-allow), [`sandbox.network.allowedDomains`](#sandbox-network-alloweddomains), and other list keys |settings-reference see the edit
Anthropic's documentation has since written up allowedDomains, on All settings.