{"version":"0.2.40","anchor":"security-enhancements","canonical_anchor":"security-enhancements","heading":"Security Enhancements","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/0.2.40\/e\/security-enhancements","release_url":"https:\/\/changelogs.core-directive.com\/v\/0.2.40","markdown":"### Security Enhancements\n\nURL Validation for WebFetch\n\n- WebFetch tool now requires URLs to be \"provided directly by the user in the current or a previous message\"\n- Added URL extraction from user messages to maintain a whitelist of allowed URLs\n- Prevents potential security issues from arbitrary URL fetching\n\nCustom HTTP Headers Support\n\n- New environment variable `ANTHROPIC_CUSTOM_HEADERS` for adding custom headers to API requests\n- Supports multi-line header definitions with `name: value` format\n- Useful for proxy authentication or custom API configurations"}