sandbox.network.deniedDomains Setting

Description

Configuration key added in v2.1.113 that blocks specific domains even when a broader sandbox.network.allowedDomains wildcard would otherwise permit them. Responsive to post-leak supply-chain scenarios (typosquatted registries, internal artifact mirrors) where wildcards like *.npmjs.org are too broad. Enables deny-overrides-allow semantics for outbound network policy.

Key claims

Relations

Sources

src-20260423-22e662f6932a