You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
SandboxArea: what it touches
New FeaturesKind: in v2.1.251,
New FeaturesSection of the release
What
With credential env scrubbing on and sandboxing enabled, shell commands are now given a masked environment, and bash shells additionally get their env var names respelled. Sandboxed processes therefore cannot read the real names of your credential variables.
Details
Requires both credential scrubbing and sandboxing to be active; with either off, the normal environment is used.
The name-respelling step applies to the bash shell path specifically.
Evidence
sandboxMaskedEnv: Ee && R ? Ght().masked : void 0
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
