AIKIDO-2026-968695

TL;DR

The local web_fetch_tool's allowed_domains/blocked_domains lists compare a hostname to their entries by exact string match, without putting either side in the form the DNS resolver actually uses. A hostname written with fullwidth or other non-ASCII label separator characters resolves to a blocked domain while the string comparison reads it as a different name, letting a model chosen URL reach a domain the list was meant to block. The fix compares both the request hostname and the list entries in the ASCII form the resolver produces before matching.