You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
PluginsArea: what it touches
New FeaturesKind: in v2.1.238,
New FeaturesSection of the release
What
When a plugin marketplace supplies a command you are asked to approve, every non-printable and non-ASCII character is now shown as a \u{...} escape, and a warning is attached when anything was escaped. A command carrying hidden or control characters can no longer look harmless in the approval prompt.
Details
The warning tells you the command contains escaped characters and to not proceed unless you expected them.
Applies to the consent rendering path with no flag or setting behind it.
Evidence
Do not proceed unless you expected them.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
