You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.277,
ImprovementsSection of the release
What
Claude Code maintains a list of hostnames used by cloud providers to serve instance metadata, which is blocked from being fetched as a security precaution. That list now also includes instance-data.ec2.internal, an Amazon EC2 metadata hostname.
Why
This closes a gap where a request to this EC2 metadata hostname might not have been blocked, reducing the risk of leaking cloud instance credentials or metadata through a fetched URL.
