You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
PluginsArea: what it touches
New FeaturesKind: in v2.1.251,
New FeaturesSection of the release
What
When a plugin install produces a directory whose top-level entries are symlinks, each entry is now run through the same untrusted-link check already used elsewhere, so a link pointing at a network location or through an untrusted link is refused instead of being linked into the install.
Details
The refusal message names the path and the reason.
Unconditional.
Evidence
points at a network location or through a link that cannot be trusted; refusing to link it
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
