Under the hood
New regex detects invisible and control characters in permission-rule text for safe display
What
A new pattern matches angle brackets, control characters, and most Unicode "format" characters (invisible characters used for text formatting, excluding zero-width non-joiner and zero-width joiner) in permission rule strings.
Why
Permission rule text can contain invisible or control characters that would otherwise render oddly or be used to hide content; this pattern lets Claude Code detect and escape them before displaying rules.