You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.312,
ImprovementsSection of the release
What
On macOS, Claude Code can run commands in a sandbox, a fenced-off space that limits what they can reach. Claude Code uses proxy ports, local network ports that carry traffic for those commands. For these ports, the sandbox rules have changed:
Binding and accepting incoming connections were allowed on localhost. Both are now denied on any local address
Connecting out to localhost on these ports is still allowed
Why
A sandboxed command can no longer claim one of the proxy ports or listen on it. It can still send traffic through them.
