You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Prompt SafetyArea: what it touches
ImprovementsKind: in v2.1.239,
ImprovementsSection of the release
What
Text coming from outside Claude Code is normalised more aggressively before it is inspected, closing off characters that could be used to disguise instruction markers. Combining accents are stripped, six more angle-bracket lookalikes are folded, and dash lookalikes and line/paragraph separators are now recognised as their plain equivalents.
Details
Combining marks are removed by decomposing the text and deleting all mark characters.
New homoglyphs mapped: \u226E, \u226F, \u227A, \u227B, \u22D6, \u22D7.
New character classes cover dash lookalikes such as the minus sign and super/subscript minus, and the control class now includes \u2028 and \u2029.
Evidence
e.normalize("NFKD").replace(/\p{M}+/gu, "")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
