Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.223 Home All releases ←olderv2.1.222 v2.1.224newer→
Claude Code v2.1.223

Command-display sanitizer rewritten to handle bidi controls and lone surrogates

You'll notice
Useful3 Signal0
Permissions

Commands shown in approval prompts are cleaned harder, so text can't be visually spoofed into looking harmless.

What

The sanitizer behind command rendering in the approval path now defends against bidi spoofing and malformed text, not just control characters.

Details
  • the old char-by-char helper that replaced C0/C1 controls with U+FFFD was removed
  • the replacement iterates code points, drops emoji variation selectors entirely, and replaces control characters, bidi/isolate format controls and lone surrogates with U+FFFD
  • a final normalization step runs afterwards, with an optional extra pass
Evidence

\uFFFD

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.223 →