{"version":"2.1.286","anchor":"url-host-mismatch-check-adds-an-extra-early-deny-test","canonical_anchor":"url-host-mismatch-check-adds-an-extra-early-deny-test","heading":"Suspicious-web-address check gains one more early rejection","tier":"notice","area":"Web Fetch","url":"https:\/\/changelogs.core-directive.com\/v\/2.1.286\/e\/url-host-mismatch-check-adds-an-extra-early-deny-test","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.286","markdown":"### Suspicious-web-address check gains one more early rejection\n\nClaude Code's check for suspicious web addresses now rejects one more kind of address before comparing hosts\n\n**Unclear.** It is not clear what kind of address the new early test catches.\n\n**What**\n\nClaude Code has a check that flags web addresses whose real destination may differ from what they appear to be. It already rejected addresses containing a null character. It now rejects another kind of address at the same early stage, before it compares the site names. The rest of the check is unchanged.\n\n**Why**\n\nThis may make the check stricter about which web addresses it lets through.\n\n- Area: Web Fetch\n- Tier: You'll notice\n- Useful: 1\/5\n- Signal: 1\/5"}