Haruno can open and read a public web page for you, even though a command in the sandbox has no internet. Only public https sites work, and one setting decides whether it asks first.
Mac appAvailableA website Haruno wants to open asks first. Sites you always allow are listed in Settings ▸ Advanced ▸ Security.
Windows appAvailableSettings ▸ Advanced ▸ Allow Web Fetch without asking is on by default and only appears in the advanced view.
Haruno can open a specific web page and read it. This is called Web Fetch. It works in the sandbox, even though a command Haruno runs has no internet of its own.
What the customer sees
When Haruno wants a page, the chat shows a step such as open a web page. Unless Web Fetch is allowed without asking (see below), a card appears first. See Approvals and permission modes.
Web Fetch reads one page at a time. Searching the web is a separate action.
The sites Haruno read pages on are listed under Sources in the Activities panel, with the number of pages read on each.
Sources lists the sites Haruno read pages on, and the files it opened.
Which pages it can open
Only public sites, over a secure address (https).
Not a page on this PC or on a company network. Addresses that are private are refused.
A very large page is cut off. Haruno reads about the first 10 MB.
A few sites fail here and open in a browser
A site that is set up with an incomplete security certificate can fail in the sandbox while it opens normally in a browser. Such sites are rare. If a customer reports one page that will not open, this is a likely reason.
Asking first, or not
The setting is Settings ▸ Advanced ▸ Allow Web Fetch without asking. It is on by default.
Setting
What happens
On
Haruno opens public pages without a card.
Off
Haruno asks before it fetches a site it does not already trust.
The setting appears only in the advanced view. The normal view does not show it and keeps whatever it was set to, which is on unless someone changed it.
Why a command cannot do the same
A command in the sandbox cannot make an internet connection. If Haruno runs a download command, it fails. That is by design: web pages go through Web Fetch, where Haruno can check that the site is public and secure. See The sandbox.
What to tell a customer
Haruno can read public web pages for a task. It cannot read a page that sits on this PC or on a company network. For a site where the person has to sign in, the browser tools let Haruno work in a browser window where the person signs in themselves.