Claude Code v2.0.20 ·
Enhanced Bash Security Checks
EntryKind: in v2.0.20,
ChangesSection of the release
What: Improved detection of backtick command substitution with escape-aware parsing
Details:
- Dedicated
CV6() function properly handles escaped characters - Backtick checks now execute before other pattern matching
- More accurate detection prevents false positives from escaped backticks
- Evidence:
CV6() at line 205030, RV6() at line 205296
See this entry in the whole of v2.0.20 →