{"version":"2.1.280","anchor":"openssl-conf-added-to-sanitizedstripped-environment-variabl","canonical_anchor":"openssl-conf-added-to-sanitizedstripped-environment-variabl","heading":"OPENSSL_CONF and LOCPATH added to the sanitized\/stripped environment variable list","tier":"notice","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.280\/e\/openssl-conf-added-to-sanitizedstripped-environment-variabl","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.280","markdown":"### OPENSSL_CONF and LOCPATH added to the sanitized\/stripped environment variable list\n\nOPENSSL_CONF and LOCPATH join the list of environment variables Claude Code strips or guards against when spawning subprocesses.\n\n**What**\n\n- `OPENSSL_CONF` was added to the list of environment variables (alongside `LD_PRELOAD`, `LD_AUDIT`, `DYLD_INSERT_LIBRARIES`, `NLSPATH`) that get special, security-motivated handling, typically stripped when spawning subprocesses.\n\n- `LOCPATH` was likewise added to that list of guarded environment variables (which also includes `LD_AUDIT`, `GCONV_PATH`, `NLSPATH`, `PSMODULEPATH`, `DYLD_INSERT_LIBRARIES`).\n\n**Why**\n\nThis closes off more ways a malicious or misconfigured environment variable could inject unexpected behavior into subprocesses that Claude Code spawns.\n\n- Area: Permissions\n- Tier: You'll notice\n- Useful: 1\/5\n- Signal: 1\/5"}