John T. Myers f954e5927a fix(sandbox): resolve sandbox host aliases in SSRF checks (#912) ...

Closes #879

Resolve policy hostnames against the sandbox's /etc/hosts before DNS so Kubernetes hostAliases are visible to the proxy while keeping the existing allowed_ips SSRF enforcement semantics intact.

Signed-off-by: John Myers <9696606+johntmyers@users.noreply.github.com>

2026-04-22 12:37:32 -07:00

..

best-practices.mdx

fix(sandbox): resolve sandbox host aliases in SSRF checks (#912)

2026-04-22 12:37:32 -07:00