FB7508162: Allow making the sandbox network entitlements less broad

[sindresorhus]

• Date: 2019-12-25
• Resolution: Open
• Area: Xcode
• OS: macOS 10.15.2
• Type: Suggestion

Description

Currently, if you have a sandboxed app and want to access a single domain, you have to enable the "Outgoing Connections" entitlement, which enables your app to talk to any remote host. It would be useful to be able to provide a list of URLs or URL patterns [1] of allowed hosts in the entitlements file. This would improve privacy and security greatly.

[1]: Example of patterns: https://developer.chrome.com/extensions/match_patterns