Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.0.15 Home All releases ←olderv2.0.14 v2.0.17newer→
Claude Code v2.0.15

Command Flag Obfuscation Detection

What: Fixed quote handling in command security checks to properly detect obfuscated flags with escaped characters.

Details:

  • Function Ck6() at line 274379 now tracks quote state and escape sequences
  • Added escape sequence tracking with Y flag (lines 274396-274402)
  • Properly handles single quotes (') and double quotes (") separately (lines 274403-274410)
  • Checks fullyUnquotedContent instead of originalCommand for better accuracy (line 274433)
  • Prevents false positives from legitimate quoted strings in command arguments
  • Evidence: v2.0.14 function y_6() at line 273725 had simpler quote detection; v2.0.15 adds stateful quote and escape tracking (lines 274389-274411)

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

See this entry in the whole of v2.0.15 →