{"version":"2.1.285","anchor":"stricter-git-url-validation-for-plugin-and-marketplace-sourc","canonical_anchor":"stricter-git-url-validation-for-plugin-and-marketplace-sourc","heading":"Git addresses for plugins and marketplaces are checked more strictly","tier":"notice","area":"Plugins","url":"https:\/\/changelogs.core-directive.com\/v\/2.1.285\/e\/stricter-git-url-validation-for-plugin-and-marketplace-sourc","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.285","markdown":"### Git addresses for plugins and marketplaces are checked more strictly\n\nClaude Code now refuses git addresses with certain odd characters when installing plugins or adding marketplaces, and explains which forms work\n\n**What**\n\nPlugins and plugin marketplaces can be downloaded from git addresses. Claude Code now refuses a git address when it contains any of the following:\n\n- `%00` anywhere in the address.\n\n- Square brackets that git could read as the name of a server.\n\n- A backslash before the first `\/` of an `http` or `https` address.\n\n- `:\/\/` inside a short-form address such as `git@host:path`.\n\nWhen an address is refused, Claude Code says it is refusing to clone or refusing to query, and gives the reason. An error about an unreadable address now lists the forms Claude Code accepts. A `file:\/\/` address that contains a drive letter gets an extra note that only applies on Windows.\n\nThe same check now covers downloading, looking up available versions, and asking a remote for its contents. It also covers two more places:\n\n- A marketplace given as a network git address. If the address fails the check, the marketplace is skipped.\n\n- Marketplaces listed from claude.ai. A git-based one only appears in the list if its address passes the check.\n\n**Why**\n\nSome unusual addresses can make git connect to a different server than the one the address seems to name. Refusing them closes that trick. A few odd addresses that used to work will now be refused.\n\n- Area: Plugins\n- Tier: You'll notice\n- Useful: 1\/5\n- Signal: 1\/5"}