The hook-details panel now sanitizes displayed strings, including the matcher, plugin name, status message, and command/config summary, replacing control characters, format characters, and other unsafe code points with visible placeholders (for example ESC becomes ␛, and newlines/tabs get their own glyphs). This prevents terminal-control-sequence injection via hook config text.
Hook detail values now sanitized before display
Hook detail text is sanitized before display, so config text cannot inject terminal control sequences.
You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
HooksArea: what it touches
Bug FixesKind: in v2.1.257,
Bug FixesSection of the release