{"version":"2.0.35","anchor":"enhanced-unc-path-detection","canonical_anchor":"enhanced-unc-path-detection","heading":"Enhanced UNC Path Detection","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.0.35\/e\/enhanced-unc-path-detection","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.0.35","markdown":"### Enhanced UNC Path Detection\n\n**What:** Expanded detection of Universal Naming Convention (UNC) paths that could access network shares and remote resources.\n\n**Details:**\n\n- **Comprehensive pattern detection** - Now detects 6 different UNC path patterns (previously only 1):\n- Traditional backslash notation: `\\\\server\\share`\n- Forward-slash notation: `\/\/server\/share`\n- WebDAV paths containing `DavWWWRoot`\n- IPv4-based paths: `\\\\192.168.1.1\\share`\n- IPv6-based paths: `\\\\[2001:db8::1]\\share`\n- SSL\/port notation variations: `@SSL@443`, `@443@SSL`\n- **Defense-in-depth check** - Added explicit UNC path verification in permission checking that triggers before other path validation, requiring manual user approval with message: \"Claude requested permissions to read from {path}, which appears to be a UNC path that could access network resources\"\n- **Evidence**: `kB1() at line 469623`, `Cm() at line 474419` (new UNC check at lines 474427-474436)"}