Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Network EgressArea: what it touches
Internal ChangesKind: in v2.1.281,
Internal ChangesSection of the release
Unclear The finding does not say which settings screen shows these strings or what the helper cache TTL field controls.
What
New text was added to the settings interface for the egress allowlist. "Egress" means outgoing network connections, and the allowlist is the list of hosts those connections may go to. The text sets out what one entry may look like:
* matches any host, with no port allowed on the bare *
localhost names the local machine
host[:port] is a single host, optionally with a port from 1 to 65535
*.host[:port] matches every subdomain of a host, optionally with a port
An entry may not contain a scheme (such as https://), a path, or an IPv6 literal address. The host-list box shows *.corp.example.com as a placeholder example. Separately, a helper cache TTL field (TTL means how long a cached value is kept) is now tagged availableInVersion 1.19367.0.
Why
Anyone filling in the allowlist now sees the accepted formats spelled out, which helps avoid entries that would not be accepted.
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtThe finding does not say which settings screen shows these strings or what the helper cache TTL field controls.
