{"version":"2.1.315","anchor":"bash-command-guard-stricter-on-possibly-empty-glob-words-s","canonical_anchor":"bash-command-guard-stricter-on-possibly-empty-glob-words-s","heading":"Stricter safety check for complex shell commands","tier":"soon","area":"Bash Safety","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.315\/e\/bash-command-guard-stricter-on-possibly-empty-glob-words-s","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.315","markdown":"### Stricter safety check for complex shell commands\n\nThe check that lets some shell commands run without asking now refuses more risky patterns, including file patterns that may match nothing\n\n**Unclear.** It is not stated whether a command refused by this check is put to you for approval or blocked outright.\n\n**What**\n\nBefore running some shell commands without asking you, Claude Code reads them to make sure they are safe. That check is now stricter:\n\n- It refuses an unquoted pattern such as `*.txt` placed before `ssh`, `gcloud` or similar commands, because a pattern that matches no file, or an empty value, can vanish and let the next word take its place. The message tells you to quote it or name the files.\n\n- It warns about the `--ssh-flag` and `--scp-flag` options of `gcloud`.\n\n- It handles `exec` commands in the style of `kubectl exec`.\n\n- It refuses `typeset -i` and `typeset -F` declarations of special variable names.\n\n- It no longer treats variables that bash or zsh set themselves as harmless.\n\nClaude Code's built-in default turns these extra checks on, though the server can change that.\n\n**Why**\n\nMore compound shell commands will stop passing this automatic check. To get past it, quote patterns or list files by name.\n\n- Flag `tengu_hollow_sandpiper`: Not enough to say (read for one account on one subscription tier against v2.1.315; this account: no value returned, anonymous baseline: no value returned, compiled default: not a boolean we can read) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Bash Safety\n- Tier: Nothing to try yet\n- Useful: 1\/5\n- Signal: 3\/5\n- Scope: individual\n- Heads-up: no\n- Present in the build but not switched on"}