{"version":"2.1.223","anchor":"command-display-sanitizer-rewritten-to-handle-bidi-controls-","canonical_anchor":"command-display-sanitizer-rewritten-to-handle-bidi-controls-","heading":"Command-display sanitizer rewritten to handle bidi controls and lone surrogates","tier":"notice","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.223\/e\/command-display-sanitizer-rewritten-to-handle-bidi-controls-","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.223","markdown":"### Command-display sanitizer rewritten to handle bidi controls and lone surrogates\n\nCommands shown in approval prompts are cleaned harder, so text can't be visually spoofed into looking harmless.\n\n**What**\n\nThe sanitizer behind command rendering in the approval path now defends against bidi spoofing and malformed text, not just control characters.\n\n**Details**\n\n- the old char-by-char helper that replaced C0\/C1 controls with U+FFFD was removed\n- the replacement iterates code points, drops emoji variation selectors entirely, and replaces control characters, bidi\/isolate format controls and lone surrogates with U+FFFD\n- a final normalization step runs afterwards, with an optional extra pass\n\n**Evidence**\n\n`\\uFFFD`\n\n- Area: Permissions\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 0\/5"}