Under the hood
Bash heredoc/pipe protections now also account for always-deny host-credential rules
What
Claude Code blocks bash commands that use heredocs (multi-line input blocks) or pipes to read files outside your working directories. That check now also looks at the command's "always deny" rules, checking whether any of them target the current session and whether none of the other deny rules (aside from a host-credential rule) apply, before deciding whether to block the read.
Why
This tightens the existing protection against commands that try to read sensitive files (like host credentials) from outside the working directory, making the block more consistent with how always-deny rules are otherwise enforced.