{"version":"2.1.232","anchor":"redirection-checks-prefer-the-strongest-denial","canonical_anchor":"redirection-checks-prefer-the-strongest-denial","heading":"Redirection checks prefer the strongest denial","tier":"notice","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.232\/e\/redirection-checks-prefer-the-strongest-denial","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.232","markdown":"### Redirection checks prefer the strongest denial\n\nWhen a command writes several paths, the strongest denial wins instead of the first one found.\n\n**What**\n\nWhen a command writes to several paths, the checker now collects every blocking result and returns one that cannot be waived by the permission classifier if there is one, instead of stopping at the first hit found. An older redirection and process-substitution checker was removed in the same change.\n\n**Evidence**\n\n`classifierApprovable`\n\n- Area: Permissions\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 2\/5"}