Advanced Shell Command Escaping

What: Sophisticated detection and escaping of dangerous shell constructs like heredocs and multiline strings How to use: This protection is automatic when Claude executes shell commands. It prevents injection attacks in complex scenarios:

# Heredocs are now safely handled
cat << EOF
$(potentially_dangerous_command)
EOF

# Multiline strings are properly escaped
echo 'line1
line2'

Details:

• Detects heredoc patterns that could bypass normal escaping
• Identifies multiline strings that might hide malicious commands
• Applies context-aware escaping strategies
• Automatically adds stdin redirection (< /dev/null) to prevent interactive command exploitation
• Protects against arithmetic expansion and nested command substitution attacks