{"version":"2.1.257","anchor":"plan-mode-file-tools-stricter-outside-working-directory-rea","canonical_anchor":"plan-mode-file-tools-stricter-outside-working-directory-rea","heading":"Plan-mode file tools: stricter outside-working-directory read blocking","tier":"notice","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257\/e\/plan-mode-file-tools-stricter-outside-working-directory-rea","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257","markdown":"### Plan-mode file tools: stricter outside-working-directory read blocking\n\nWith outside reads blocked, read-only tool calls in restricted contexts are now checked against the allowlist too.\n\nWhen `blockReadsOutsideWorkingDirectories` is enabled, read-only tool calls in restricted contexts are now additionally checked against the working-directory allowlist, with path-suffix normalization applied before the check. This closes a gap where such reads could previously slip through.\n\n- Area: Permissions\n- Names: `blockReadsOutsideWorkingDirectories`\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 2\/5"}