All settings changedsettings-reference
Nearest release: v2.1.312, published under an hour before upstream edited the page. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Upstream edited this page at 27 Oct 2026 19:24 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 27 Oct 2026 19:37 UTC.
Upstream edited
Recorded here
Lines+5added
Lines−7removed
From line
1,289
where the diff opens
First seen
21 Aug 2026
this site's first read of the page
Recorded edits160to this page, all time
The whole hunk
from line 1289, old and new numbered
/
This page is larger than the 256 KiB this site keeps, so one side of the diff below stops where the stored text does.
from line 1289
12891289* A command starting with `sudo`, `eval`, or `xargs`
12901290* A `cd`, `pushd`, or `popd`, wherever it appears in the call
12911291* A command substitution, a subshell, or a control-flow block such as `if` or `for`
1292* A redirection, such as `docker build . > build.log`, other than one that only duplicates a file descriptor, as `2>&1` does
1292* A redirection, such as `docker build . > build.log` or a `<<EOF` heredoc, other than one that only duplicates a file descriptor, as `2>&1` does
12931293* A command name that comes from a variable
12941294* A `git clone`, `git init`, `git worktree add`, `git worktree move`, or `git bundle create` with a path argument that is absolute, starts with `~`, or contains a `..` segment
12951295
from line 1517
15171517
15181518### `sandbox.filesystem.disabled`
15191519
1520Skip filesystem isolation while keeping network isolation. Sandboxed commands get unrestricted read and write access to the host filesystem, and their network egress stays confined to [`network.allowedDomains`](#sandbox-network-alloweddomains). Use it when you sandbox to control where commands connect rather than what they write. Requires Claude Code v2.1.216 or later.
1520Skip filesystem isolation while keeping network isolation. Sandboxed commands get unrestricted read and write access to the host filesystem, and their network egress stays confined to [`network.allowedDomains`](#sandbox-network-alloweddomains). Use it when you sandbox to control where commands connect rather than what they write.
15211521
15221522* **Scope**: [`User or managed`](#scopes). When managed settings configure `sandbox.filesystem` at all, or list a `sandbox.credentials.files` entry with `"mode": "deny"`, only managed settings can set it.
15231523* **Type**: Boolean
from line 1541
15411541}
15421542```
15431543
1544With the layer off, Claude Code doesn't enforce `denyRead` or `credentials.files` `deny` entries, while `credentials.envVars` entries and applied `mask` entries keep working. [`autoAllowBashIfSandboxed`](#sandbox-autoallowbashifsandboxed) still defaults to `true`, so set it to `false` to keep prompting. See [Disable filesystem isolation](https://code.claude.com/docs/en/sandboxing.md#disable-filesystem-isolation) for the full list of sources that can set it and what changes when isolation is off. Requires Claude Code v2.1.216 or later.
1544With the layer off, Claude Code doesn't enforce `denyRead` or `credentials.files` `deny` entries, while `credentials.envVars` entries and applied `mask` entries keep working. [`autoAllowBashIfSandboxed`](#sandbox-autoallowbashifsandboxed) still defaults to `true`, so set it to `false` to keep prompting. See [Disable filesystem isolation](https://code.claude.com/docs/en/sandboxing.md#disable-filesystem-isolation) for the full list of sources that can set it and what changes when isolation is off.
15451545
15461546### `sandbox.ignoreViolations`
15471547
from line 2713
27132713}
27142714```
27152715
2716See [Emoji shortcodes](https://code.claude.com/docs/en/interactive-mode.md#emoji-shortcodes). Requires Claude Code v2.1.217 or later.
2716See [Emoji shortcodes](https://code.claude.com/docs/en/interactive-mode.md#emoji-shortcodes).
27172717
27182718### `fileSuggestion`
27192719
from line 3437
34373437
34383438### `attribution.commit`
34393439
3440Set the attribution text Claude Code adds to git commits, including any trailers. Set
3440Set the attribution text Claude Code adds to git commits, including any trailers. Set it to an empty string to hide commit attribution.
3441
3442* **Scope**: [`Any file`](#scopes)
3443* **Type**:
No line in this hunk matches that.