Follow Discord
Sweep 22 Oct 2026 · 21:04Z Build v2.1.309 528 read Stable v2.1.308 Latest v2.1.309 Next v2.1.309 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.0.15 ·

Command Flag Obfuscation Detection

Entry
JSON All of v2.0.15
EntryKind: in v2.0.15,
ChangesSection of the release

What: Fixed quote handling in command security checks to properly detect obfuscated flags with escaped characters.

Details:

  • Function Ck6() at line 274379 now tracks quote state and escape sequences
  • Added escape sequence tracking with Y flag (lines 274396-274402)
  • Properly handles single quotes (') and double quotes (") separately (lines 274403-274410)
  • Checks fullyUnquotedContent instead of originalCommand for better accuracy (line 274433)
  • Prevents false positives from legitimate quoted strings in command arguments
  • Evidence: v2.0.14 function y_6() at line 273725 had simpler quote detection; v2.0.15 adds stateful quote and escape tracking (lines 274389-274411)

See this entry in the whole of v2.0.15 →

Feedback