Skip to content

Commit 05bee19

Browse files
miyoungcclaude
andcommitted
fix(policy): remove DELETE method from Discord preset
Discord bots rarely need DELETE access. Removing it reduces the attack surface for sandbox agents interacting with Discord APIs. Fixes #1433 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent c99e3e8 commit 05bee19

File tree

1 file changed

+0
-1
lines changed

1 file changed

+0
-1
lines changed

nemoclaw-blueprint/policies/presets/discord.yaml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,6 @@ network_policies:
1919
- allow: { method: POST, path: "/**" }
2020
- allow: { method: PUT, path: "/**" }
2121
- allow: { method: PATCH, path: "/**" }
22-
- allow: { method: DELETE, path: "/**" }
2322
# WebSocket gateway — must use access: full (CONNECT tunnel) instead
2423
# of protocol: rest. The proxy's HTTP idle timeout (~2 min) kills
2524
# long-lived WebSocket connections; a CONNECT tunnel avoids

0 commit comments

Comments
 (0)