[MODEL] No exemption for local/private-network origins on the browser JS-execution permission gate

Preflight Checklist

• [x] I have searched existing issues for similar behavior reports
• [x] This report does NOT contain sensitive information (API keys, passwords, etc.)

Type of Behavior Issue

Other unexpected behavior

What You Asked Claude to Do

Every javascript_tool / browser "execute JavaScript" call is gated by a per-action confirmation dialog ("Allow Claude to execute JavaScript on X?") with no persistent "Always allow" option — this is by design for arbitrary third-party sites. But it applies identically to .local mDNS hosts and other private-network origins (e.g. hub.local, wrapservicer.local) pointing at a MAMP/local dev server on the same machine running Claude Code.

This means trivial, harmless reads on my own local dev environment — e.g. location.href, document.readyState, document.body.innerText.slice(0,500) — require a manual click every single time, with no way to trust the origin even once. For local development workflows (which is presumably a large fraction of Claude Code's actual usage) this adds constant manual-approval overhead for an origin that carries none of the risk the gate is meant to address (no external network exposure, no arbitrary internet site, same machine as the one running the agent).

Request: exempt loopback/private-network/.local origins from the mandatory per-action JS-execution gate — or at minimum let "Always allow" apply to them like it already does for the general "act on this site" navigate/click permission, since that one already treats local dev hosts as safely persistable.

What Claude Actually Did

Just says "Allow Once"

Expected Behavior

Always allow or setting to always allow on local environments.

Files Affected

.local

Permission Mode

Accept Edits was ON (auto-accepting changes)

Can You Reproduce This?

Yes, every time with the same prompt

Steps to Reproduce

read a local site

Claude Model

Opus

Relevant Conversation

Impact

Low - Minor inconvenience

Claude Code Version

Claude 1.20186.1 (df1d8a) 2026-07-10T21:55:12.000Z

Platform

Anthropic API

Additional Context

_No response_