{"version":"2.1.310","anchor":"link-text-path-climbs-are-refused-unless-a-caller-allows-the","canonical_anchor":"link-text-path-climbs-are-refused-unless-a-caller-allows-the","heading":"Paths that climb out of a folder through a link are now refused","tier":"notice","area":"File Safety","scope":"individual","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.310\/e\/link-text-path-climbs-are-refused-unless-a-caller-allows-the","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.310","markdown":"### Paths that climb out of a folder through a link are now refused\n\nA path that climbs out of its folder through a link's target is now refused unless the check explicitly allows it\n\n**What**\n\nA link is a file that points to another place on disk, and the text it holds can climb up out of a folder, for example with `..`. Claude Code checks paths before using them. That check used to let such climbs through and only note them. It now refuses the path, unless the part of Claude Code doing the check explicitly allows these climbs.\n\nWhen screening reports a path refused for this reason, Claude Code treats it as a bad path.\n\n**Why**\n\nThis tightens how Claude Code guards against paths that escape a folder by way of a link. Some paths that used to be accepted may now be blocked.\n\n- Area: File Safety\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 1\/5\n- Scope: individual\n- Heads-up: yes"}