Bash commands that pipe code via stdin, such as here-docs (<<<, <<) or piped commands after the first, are now refused outright when the read-block setting is active, since their stdin content cannot be statically checked against the working-directory read restriction.
New deny path for code piped via stdin/heredoc under read-block mode
With read blocking on, bash commands piping code in through here-docs or later pipe stages are refused outright.
You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.257,
ImprovementsSection of the release