{"version":"2.1.238","anchor":"plugin-consent-prompts-escape-invisible-characters-in-comman","canonical_anchor":"plugin-consent-prompts-escape-invisible-characters-in-comman","heading":"Plugin consent prompts escape invisible characters in commands","tier":"notice","area":"Plugins","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.238\/e\/plugin-consent-prompts-escape-invisible-characters-in-comman","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.238","markdown":"### Plugin consent prompts escape invisible characters in commands\n\nPlugin approval prompts now escape hidden characters so a command cannot look harmless.\n\n**What**\n\nWhen a plugin marketplace supplies a command you are asked to approve, every non-printable and non-ASCII character is now shown as a `\\u{...}` escape, and a warning is attached when anything was escaped. A command carrying hidden or control characters can no longer look harmless in the approval prompt.\n\n**Details**\n\n- The warning tells you the command contains escaped characters and to not proceed unless you expected them.\n- Applies to the consent rendering path with no flag or setting behind it.\n\n**Evidence**\n\n`Do not proceed unless you expected them.`\n\n- Area: Plugins\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 2\/5"}