You'll notice
Useful3 Signal2
File paths in tool lines and consent dialogs are stripped of control characters so filenames can't fake output.
What's wrong with this entry?
Anonymous. No account, no email.
What
Paths displayed in tool-use lines and file access consent dialogs now pass through a sanitiser that removes or replaces control and non-printable characters before rendering, so a crafted filename cannot rewrite what you see when deciding whether to approve something.
Details
- When the sanitiser changed the string, a replacement character (U+FFFD) is appended so the display is visibly marked as altered.
- Diff line rendering runs its output through the same escaping pass.
- A separate escaper neutralises
\uXXXXescape sequences and non-ASCII bytes. - Not gated; applies to everyone.
Evidence
\uFFFD
Strings lifted out of the shipped bundle, so the claim above can be checked against them.