You'll notice
Settings files reached through unverifiable or cross-host symlinks are refused, not followed
What
When Claude Code reads a settings file, it now checks whether the resolved path is a symlink (a file that points to another location) and whether that symlink is canonical (resolves cleanly and verifiably) or points somewhere the sandboxed path check can't confirm, such as another host. If the check fails, Claude Code refuses to read the file at all instead of following the link.
Why
This closes off a way a settings file could be used to redirect Claude Code into reading from an untrusted or unverifiable location.