{"version":"2.1.265","anchor":"bash-heredocpipe-read-restriction-check-extended-to-always","canonical_anchor":"bash-heredocpipe-read-restriction-check-extended-to-always","heading":"Bash heredoc\/pipe read-restriction check extended to always-deny host-credential rules","tier":"internal","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.265\/e\/bash-heredocpipe-read-restriction-check-extended-to-always","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.265","markdown":"### Bash heredoc\/pipe read-restriction check extended to always-deny host-credential rules\n\nBash heredoc\/pipe protections now also account for always-deny host-credential rules\n\n**What**\n\nClaude Code blocks bash commands that use heredocs (multi-line input blocks) or pipes to read files outside your working directories. That check now also looks at the command's \"always deny\" rules, checking whether any of them target the current session and whether none of the other deny rules (aside from a host-credential rule) apply, before deciding whether to block the read.\n\n**Why**\n\nThis tightens the existing protection against commands that try to read sensitive files (like host credentials) from outside the working directory, making the block more consistent with how always-deny rules are otherwise enforced.\n\n- Area: Permissions\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 1\/5"}