itszn
You can jailbreak the httpjail 😎 I found an exploit that totally bypasses all protection, allowing an attacker to still exfiltrate anything they want from the jail The exploit tricks the proxy server, which thinks everything is cool, but it sends the request to my evil site!
Simon Willison
Just published some notes on httpjail - this is a really interesting new sandboxing project, it lets you run a process (on macOS or Linux or in Docker) with strict restrictions on what outbound HTTP requests it can make, specified as JS or a shell script https://simonwillison.net/2025/Sep/19/httpjail/