{"version":"2.1.223","anchor":"host-orchestrated-env-var-protection-is-case-insensitive","canonical_anchor":"host-orchestrated-env-var-protection-is-case-insensitive","heading":"Host-orchestrated env var protection is case-insensitive","tier":"notice","area":"Windows","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.223\/e\/host-orchestrated-env-var-protection-is-case-insensitive","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.223","markdown":"### Host-orchestrated env var protection is case-insensitive\n\nOn Windows, differently-cased environment variable names can no longer override ones the host has claimed.\n\n**What**\n\nEnvironment variables claimed by the host can no longer be overridden by a differently-cased key, which mattered on Windows where env var names are case-insensitive.\n\n**Details**\n\n- The claimed set is built by uppercasing the keys of `process.env`.\n- The filter that strips settings-provided env compares with `.toUpperCase()`.\n- The guard that drops lower-trust redirects does the same.\n\n**Evidence**\n\n`if (!uhr.has(r.toUpperCase())) t[r] = n;`\n\n- Area: Windows\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 0\/5"}