{"version":"2.1.317","anchor":"only-https-origins-accepted-for-url-origin-helper","canonical_anchor":"only-https-origins-accepted-for-url-origin-helper","heading":"Web addresses other than http and https are now ignored in two places","tier":"internal","area":"Internals","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.317\/e\/only-https-origins-accepted-for-url-origin-helper","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.317","markdown":"### Web addresses other than http and https are now ignored in two places\n\nClaude Code now takes the site part of a web address only for http and https links, and ignores other kinds in two places\n\n**What**\n\nIn two places, Claude Code now takes the site part of a web address (the origin, such as `https:\/\/example.com`) only when the address starts with `http:` or `https:`. For any other kind of address it gets no origin at all. One of these places is used at startup.\n\n**Why**\n\nThis hardens how addresses are handled, so unusual address types are no longer treated like ordinary web addresses.\n\n- Area: Internals\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 0\/5\n- Scope: individual\n- Heads-up: no"}