Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.234 Home All releases ←olderv2.1.233 v2.1.235newer→
Claude Code v2.1.234

Filenames and MCP content types are escaped in the transcript

You'll notice
Useful2 Signal2
Transcript

Filenames and MCP content types are escaped in the transcript, closing a text-injection route.

What

The message recorded when you open a file in the IDE now escapes the filename, and the content type reported by an MCP server for binary results is escaped before being shown as [Binary content: …]. This narrows a path by which a crafted filename or server-supplied metadata could inject text into the conversation.

Evidence

The user opened the file

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

See this entry in the whole of v2.1.234 →