You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.307,
ImprovementsSection of the release
What
The sandbox is the restricted space Claude Code runs commands in. Its settings list paths that commands may not read. On Windows only, Claude Code now rewrites those settings so that every denyRead entry and every credentials file entry also gets a second, alternate form of the same path. Both forms are blocked.
Why
A file on Windows can often be reached by more than one path. Blocking both forms stops a command from getting around a block rule by using a different spelling of a protected path.
