{"version":"2.1.132","anchor":"bash-safety-detection","canonical_anchor":"bash-safety-detection","heading":"Bash Safety Detection","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.132\/e\/bash-safety-detection","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.132","markdown":"### Bash Safety Detection\n\nRead-only command validation gained additional shell-edge-case detection, especially around zsh recursive evaluation, array subscripts, assignment side effects, redirect expansion, and escaped brace handling. These checks reduce cases where a command that looks harmless can still execute dynamic shell code.\n\n**Evidence**\n\nShell safety reasons (search for `\"zsh $name[expr]\"`, `\"assignment alters command lookup\/execution\"`, and `\"Redirect target starts with =\"`)"}