You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
GitArea: what it touches
ImprovementsKind: in v2.1.285,
ImprovementsSection of the release
What
A git remote is the address of the online copy of a repository. When Claude Code reads that address, it now rejects some unsafe forms before trying to match it, for example addresses that look like command options. Before, only the normal pattern matching was applied.
Why
This is hardening against a crafted address being used to slip unexpected instructions into commands.
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtExactly which address forms are now rejected is not clear.
