{"version":"2.1.299","anchor":"remote-headless-client-denies-malformed-permission-requests","canonical_anchor":"remote-headless-client-denies-malformed-permission-requests","heading":"Remote headless sessions deny malformed permission requests","tier":"notice","area":"Cloud Sessions","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.299\/e\/remote-headless-client-denies-malformed-permission-requests","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.299","markdown":"### Remote headless sessions deny malformed permission requests\n\nHeadless cloud sessions now deny permission requests that arrive in the wrong shape, with a clear message\n\n**What**\n\nIn a cloud session run without the interactive screen, a worker can ask the client for permission to use a tool. The client used to accept these requests without checking their shape. It now denies a malformed request with the message \"Malformed permission request from worker\", and records a usage event when this happens.\n\n**Why**\n\nA badly formed permission request is now refused cleanly instead of being acted on.\n\n- Area: Cloud Sessions\n- Tier: You'll notice\n- Useful: 1\/5\n- Signal: 1\/5\n- Scope: individual\n- Heads-up: no"}