claude-code - 💡(How to fix) Fix Claude in Chrome: URL categorization API blocks legitimate ticket/athletics sites (false positives) [1 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
anthropics/claude-code#48295Fetched 2026-04-16 07:03:49
View on GitHub
Comments
0
Participants
1
Timeline
4
Reactions
0
Author
Participants
Timeline (top)
labeled ×4

The Claude in Chrome extension calls api.anthropic.com/api/web/url_hash_check/browser_extension to categorize domains before adding them to turnApprovedDomains. Domains classified as category1 or category2 are silently filtered out and permanently blocked — no prompt is shown, no override is possible from the extension UI.

Several legitimate sports/entertainment ticket sites on evenue.net are being incorrectly categorized and blocked.

Root Cause

Root cause (found in extension source)

Code Example

// During plan approval, domains are filtered through URL categorization:
const category = await A.getCategory(url); // calls api.anthropic.com/api/web/url_hash_check/...
if (category === "category1" || category === "category2" || category === "category_org_blocked")
    filtered.push(domain); // silently removed, never added to turnApprovedDomains

// In checkPermission() — hard block with no prompt:
if (turnApprovedDomains.size > 0 && !isTurnApprovedDomain(hostname))
    return { allowed: false, needsPrompt: false };
RAW_BUFFERClick to expand / collapse

Summary

The Claude in Chrome extension calls api.anthropic.com/api/web/url_hash_check/browser_extension to categorize domains before adding them to turnApprovedDomains. Domains classified as category1 or category2 are silently filtered out and permanently blocked — no prompt is shown, no override is possible from the extension UI.

Several legitimate sports/entertainment ticket sites on evenue.net are being incorrectly categorized and blocked.

Affected domains (all legitimate ticketing/athletics sites)

DomainSite
huskers.evenue.netUniversity of Nebraska Athletics tickets
ramblinwreck.evenue.netGeorgia Tech Athletics tickets
longbeachstate.evenue.netCal State Long Beach Athletics tickets
hawaiiathletics.evenue.netUniversity of Hawaii Athletics tickets
ictickets.evenue.netFord Idaho Center (concerts/events)
wsucougars.evenue.netWashington State University Athletics tickets
ticketswestinw.evenue.netTicketsWest (concert/event venue)

Working domains (same platform, same *.evenue.net TLD)

ticketleader.evenue.net, ticketsnorth.evenue.net, rolltide.evenue.net, mbcentre.evenue.net, texastech.evenue.net, selectyourtickets.evenue.net

How it manifests

All blocked domains return "Navigation to this domain is not allowed" from navigate, read_page, javascript_tool, computer — even though the extension UI shows them as allowed and the manifest has <all_urls> host permission.

Root cause (found in extension source)

In mcpPermissions-D7Rkh1yL.js / PermissionManager-WI3FAKQw.js (v1.0.68):

// During plan approval, domains are filtered through URL categorization:
const category = await A.getCategory(url); // calls api.anthropic.com/api/web/url_hash_check/...
if (category === "category1" || category === "category2" || category === "category_org_blocked")
    filtered.push(domain); // silently removed, never added to turnApprovedDomains

// In checkPermission() — hard block with no prompt:
if (turnApprovedDomains.size > 0 && !isTurnApprovedDomain(hostname))
    return { allowed: false, needsPrompt: false };

Expected behavior

University athletics ticket sites and regional entertainment venues should not be classified as category1/category2. These appear to be false positives — likely a sports gambling or adult content classifier incorrectly tagging legitimate Paciolan/evenue.net ticketing subdomains.

Extension version

1.0.68

extent analysis

TL;DR

The issue can be mitigated by updating the URL categorization API or the extension's filtering logic to correctly classify legitimate ticketing subdomains on evenue.net.

Guidance

  • Review the api.anthropic.com/api/web/url_hash_check/browser_extension API to ensure it correctly categorizes subdomains of evenue.net and update the API if necessary.
  • Modify the PermissionManager-WI3FAKQw.js file to add an exception for subdomains of evenue.net that are known to be legitimate, such as those listed in the "Affected domains" section.
  • Verify that the turnApprovedDomains set is being populated correctly and that the checkPermission() function is not incorrectly blocking legitimate domains.
  • Consider adding a logging or debugging mechanism to track which domains are being filtered out and why, to help identify and resolve similar issues in the future.

Example

// Example of how to add an exception for subdomains of evenue.net
const exemptDomains = ['huskers.evenue.net', 'ramblinwreck.evenue.net', /* ... */];
if (category === "category1" || category === "category2" || category === "category_org_blocked") {
  if (!exemptDomains.includes(domain)) {
    filtered.push(domain);
  }
}

Notes

The issue appears to be caused by a misclassification of legitimate ticketing subdomains by the URL categorization API. Updating the API or adding exceptions in the extension's filtering logic should resolve the issue. However, without access to the API's classification rules or the extension's full codebase, it is difficult to provide a comprehensive solution.

Recommendation

Apply a workaround by modifying the PermissionManager-WI3FAKQw.js file to add exceptions for known legitimate subdomains of evenue.net, as this is a more feasible and immediate solution than updating the URL categorization API.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

FAQ

Expected behavior

University athletics ticket sites and regional entertainment venues should not be classified as category1/category2. These appear to be false positives — likely a sports gambling or adult content classifier incorrectly tagging legitimate Paciolan/evenue.net ticketing subdomains.

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING