/ extensions / sandbox / sandbox.json
sandbox.json
 1  {
 2    "enabled": true,
 3    "network": {
 4      "allowedDomains": [
 5        "npmjs.org",
 6        "*.npmjs.org",
 7        "registry.npmjs.org",
 8        "registry.yarnpkg.com",
 9        "pypi.org",
10        "*.pypi.org",
11        "files.pythonhosted.org",
12        "github.com",
13        "*.github.com",
14        "api.github.com",
15        "raw.githubusercontent.com",
16        "githubusercontent.com",
17        "crates.io",
18        "*.crates.io",
19        "rubygems.org",
20        "deno.land",
21        "cdn.jsdelivr.net",
22        "unpkg.com",
23        "jsr.io"
24      ],
25      "deniedDomains": []
26    },
27    "filesystem": {
28      "allowRead": ["~/.orbstack"],
29      "denyRead": [
30        "~/.ssh",
31        "~/.aws",
32        "~/.gnupg",
33        "~/.config/gh",
34        "~/.netrc",
35        "~/.npmrc",
36        "~/.pypirc"
37      ],
38      "allowWrite": [".", "/tmp"],
39      "denyWrite": [".env", ".env.*", "*.pem", "*.key", "*.p12", "*.pfx"]
40    }
41  }