You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
SettingsArea: what it touches
ImprovementsKind: in v2.1.285,
ImprovementsSection of the release
What
Claude Code sometimes combines pieces of structured data, such as settings described by a schema (a description of what the data should look like). When it does, it now deletes any entry named __proto__ and skips it while combining.
Why
In JavaScript, the language Claude Code is written in, __proto__ is a special name. Data that contains it can alter how every object behaves, a kind of attack known as prototype pollution. Skipping it closes off that attack.
