You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
Bash SafetyArea: what it touches
ImprovementsKind: in v2.1.309,
ImprovementsSection of the release
What
Before running a Bash command, Claude Code reads it to decide whether it can approve it without asking you. That reading is now stricter:
Commands that set or use variables the shell fills with its own text, such as history, funcstack and names starting ZFTP_, are flagged. This part sits behind a server switch.
More $ forms inside strings are refused, including the locale and escape forms $"..." and $'...'.
Why
These names and forms can hide what a command really does. Commands that use them will more often stop for a permission prompt instead of being approved automatically.
