{"version":"2.0.37","anchor":"windows-path-security-refinement","canonical_anchor":"windows-path-security-refinement","heading":"Windows Path Security Refinement","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.0.37\/e\/windows-path-security-refinement","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.0.37","markdown":"### Windows Path Security Refinement\n\n**Simplified UNC Path Detection:** The Windows UNC path detection was simplified from 8 security checks down to 1 basic pattern check. The new implementation removes specific checks for:\n\n- IPv4 address-based UNC paths (e.g., `\\\\192.168.1.1\\share`)\n- IPv6 address-based UNC paths (e.g., `\\\\[fe80::1]\\share`)\n- WebDAV `DavWWWRoot` patterns\n- SSL\/port patterns like `@SSL@8080`\n\nFile operations no longer check for UNC paths at all, while bash command execution retains basic UNC path blocking. The security impact is reduced coverage for IP-based UNC paths and WebDAV-specific attacks.\n\n**Evidence**\n\nOld `mB1()` function at line 469909 (v2.0.36), new `i2Q()` function at line 222404, file path validation `Cr2()` at line 474880"}