Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.238 Home All releases ←olderv2.1.237 v2.1.239newer→

Claude Code v2.1.238 20 Aug 2026

Safer escaping in generated HTML output

Under the hood

Useful1 Signal1

Artifacts

Generated HTML escapes control and separator characters more safely.

What

Control characters and the Unicode line and paragraph separators are now written as numeric HTML entities in generated HTML, and titles and summaries collapse runs of whitespace after stripping.

Details

A URL decoder was replaced with a guarded decodeURIComponent that returns the raw input when decoding fails instead of throwing.

Evidence

decodeURIComponent

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.238 →