Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Fine-grained HTTP filtering for Claude Code

ammar.io

Post reply on HN
Print view View original

1–10 of 12 posts

Re: Fine-grained HTTP filtering for Claude Code

#2

Post by simonw »

This describes httpjail, a new Rust sandbox proxy tool: https://github.com/coder/httpjail

It works for any process, not just Claude Code. I got it working with Codex CLI like this:

  httpjail --js "r.host === 'chatgpt.com'" -- codex
After installing it using Cargo (and Homebrew):

  brew upgrade rust
  cargo install httpjail
I wrote more notes about it here: https://simonwillison.net/2025/Sep/19/httpjail/

Re: Fine-grained HTTP filtering for Claude Code

#6

Post by andy99 »

mandrade2 wrote: post #5

> Allow only GET requests i.e. make the internet read-only If only developers never made use of GET to modify resources... https://www.reddit.com/r/webdev/comments/6999x7/comment/dh4v...

Am I misunderstanding this one? GET still sends information to another server, what is the "read only" aspect?

Re: Fine-grained HTTP filtering for Claude Code

#7

Post by kookybakker »

andy99 wrote: post #6
mandrade2 wrote: post #5

> Allow only GET requests i.e. make the internet read-only If only developers never made use of GET to modify resources... https://www.reddit.com/r/webdev/comments/6999x7/comment/dh4v...

Am I misunderstanding this one? GET still sends information to another server, what is the "read only" aspect?

In theory a get request sent to a server should not have any side effects and only retrieve some data. In practice implemention is completely up to the developer and their rule is about as useful as putting up an exit sign to prevent people from entering your building.

Re: Fine-grained HTTP filtering for Claude Code

#8

Post by ammario »

andy99 wrote: post #6
mandrade2 wrote: post #5

> Allow only GET requests i.e. make the internet read-only If only developers never made use of GET to modify resources... https://www.reddit.com/r/webdev/comments/6999x7/comment/dh4v...

Am I misunderstanding this one? GET still sends information to another server, what is the "read only" aspect?

I meant read-only there in the sense of mutability, not exfiltration.

Of course, some websites may permit mutations through GET so it’s probably only sensible to use alongside known hosts.

Re: Fine-grained HTTP filtering for Claude Code

#9

Post by cmpaul »

ammario wrote: post #8
andy99 wrote: post #6

Earlier quoted context omitted.

Am I misunderstanding this one? GET still sends information to another server, what is the "read only" aspect?

I meant read-only there in the sense of mutability, not exfiltration. Of course, some websites may permit mutations through GET so it’s probably only sensible to use alongside known hosts.

``` GET https://mysite.com/?query=all+the+secrets ```

Re: Fine-grained HTTP filtering for Claude Code

#10

Post by userbinator »

mandrade2 wrote: post #5

> Allow only GET requests i.e. make the internet read-only If only developers never made use of GET to modify resources... https://www.reddit.com/r/webdev/comments/6999x7/comment/dh4v...

Ironically, your URL demonstrates this nicely, having a bunch of extra superfluous parameters that only serve to update some tracking database. Here is the "cleaned" URL: https://www.reddit.com/r/webdev/comments/6999x7/comment/dh4v...

I thought it'd be this old but memorable article: https://thedailywtf.com/articles/The_Spider_of_Doom

Post reply on HN