{"version":"2.1.284","anchor":"tool-schemas-can-hide-dangerouslydisablesandbox-when-unsandb","canonical_anchor":"tool-schemas-can-hide-dangerouslydisablesandbox-when-unsandb","heading":"Shell tools stop offering the sandbox escape when unsandboxed commands are disabled","tier":"notice","area":"Sandbox","url":"https:\/\/changelogs.core-directive.com\/v\/2.1.284\/e\/tool-schemas-can-hide-dangerouslydisablesandbox-when-unsandb","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.284","markdown":"### Shell tools stop offering the sandbox escape when unsandboxed commands are disabled\n\nWhen unsandboxed commands are turned off, Bash and PowerShell no longer offer Claude the dangerouslyDisableSandbox option\n\n**Unclear.** It is not clear which way of running Claude Code turns unsandboxed commands off in this way.\n\n**What**\n\nThe sandbox is a restricted environment that shell commands run inside, which limits what they can reach. Each tool Claude can use comes with a schema, a description of the inputs Claude is allowed to fill in. The Bash and PowerShell tools have an input called `dangerouslyDisableSandbox`, which asks to run a command outside the sandbox.\n\nThe schemas are now trimmed to match your sandbox settings:\n\n- `dangerouslyDisableSandbox` is removed from the Bash and PowerShell input schemas when the sandbox settings report `unsandboxedCommandsDisabled`.\n\n- `run_in_background` is still removed separately from the Bash schema when background tasks are disabled.\n\n- For another schema, the same trimming also removes `run_in_background` and `_simulatedSedEdit`.\n\n- The setup that turns off both background tasks and unsandboxed commands is applied where the tool schemas are listed.\n\nBefore this release, the schemas kept `dangerouslyDisableSandbox` in these cases. It was only listed as an input that would be refused if Claude used it.\n\n**Why**\n\nIf your setup does not allow commands to run outside the sandbox, Claude is no longer shown an option it cannot use. It therefore cannot try to escape the sandbox and then be refused.\n\n- Area: Sandbox\n- Names: `dangerouslyDisableSandbox`\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 1\/5"}