You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
TranscriptArea: what it touches
ImprovementsKind: in v2.1.234,
ImprovementsSection of the release
What
The message recorded when you open a file in the IDE now escapes the filename, and the content type reported by an MCP server for binary results is escaped before being shown as [Binary content: …]. This narrows a path by which a crafted filename or server-supplied metadata could inject text into the conversation.
Evidence
The user opened the file
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
