Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
PermissionsArea: what it touches
Internal ChangesKind: in v2.1.269,
Internal ChangesSection of the release
What
A new pattern matches angle brackets, control characters, and most Unicode "format" characters (invisible characters used for text formatting, excluding zero-width non-joiner and zero-width joiner) in permission rule strings.
Why
Permission rule text can contain invisible or control characters that would otherwise render oddly or be used to hide content; this pattern lets Claude Code detect and escape them before displaying rules.