Repository Issue Activity (beta)

#543 Body substitution drops Content-Length for every request to a host with a short masked credential, breaking strict upload endpoints (GitHub release assets: 400 Bad Content-Length)

#538 `filterRequest` denial destroys a still-uploading client's request, so the 403 and its reason are lost

#540 macOS: mandatory-deny globs match inside node_modules, denying writes the Linux path already exempts

#494 Loopback rule does not match the IPv4-mapped form ::ffff:127.0.0.1, breaking dual-stack clients (gRPC)

#498 Secure mode never gives apply-seccomp CAP_SYS_ADMIN: --cap-drop ALL empties the bounding set, so the nested-userns fallback cannot work

#97 Claude can autonomously disable sandbox in auto-allow mode

#511 Linux violation monitor doesn't observe read-only opens (denyRead blocks are invisible to SandboxViolationStore)

#490 tls-terminate-proxy crashes the process (ERR_INVALID_CHAR) on a non-latin1 response header

#487 `filterRequest` updates can remain stale on established TLS tunnels

#274 Network policy is hostname-only; add support for port-scoped allow rules

#468 Support path-prefix for allowedDomains entries

#139 srt leaks dotfiles and directories while running commands and when sigkilled

#458 Bug: the mux front-end TCP port is shared across Node `cluster` workers, violating srt's own per-process proxy model → intermittent 407 in restricted mode

#457 srt-win acl stamp is deterministically ~30s/path when the parent directory is a Windows system-managed directory (user profile root, %TEMP%) — breaks Windows sandbox initialize()

#429 apply-seccomp aborts on Ubuntu: AppArmor denies CAP_SYS_ADMIN to bwrap children, so no sandboxed command can run

#451 srt-win.exe dynamically links VCRUNTIME140.dll — silent loader death (0xC0000135) on machines without the VC++ Redistributable

#446 Linux: allowWrite nested inside an allowRead carve-out under denyRead is silently read-only (mount-order bug in pushReadDenyDirMounts)

#434 Unknown top-level config keys are silently ignored, so a typo'd denyWrite fails open with no warning

#432 macOS: location-independent deny globs (denyWrite, denyRead, mandatory deny) are silently anchored to process.cwd() and not enforced outside it

#65 RFE allow/deny based on target network IP

#430 `srt` blocks `hw.optional.neon`, so Qt apps abort on Apple Silicon

#428 apply-seccomp fails with EPERM on /proc/self/setgroups on bare-metal Ubuntu 24.04: bwrap 0.9.0 clears CapBnd before the helper nests its own userns

#213 Bridge socket creation fails silently when TMPDIR path exceeds Unix socket 108-char limit

#419 [BUG] macOS Seatbelt profile denies tty ioctls (TIOCSETA/TIOCSETAW), breaking interactive TUIs run under `srt`

#398 GRPC_PROXY set to unsupported socks5h proxy endpoint