{"version":"2.1.323","anchor":"windows-path-list-commands-refused-for-auto-allow-behind-ten","canonical_anchor":"windows-path-list-commands-refused-for-auto-allow-behind-ten","heading":"Windows: file-checking commands that read file lists now need approval","tier":"notice","area":"Windows","scope":"individual","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323\/e\/windows-path-list-commands-refused-for-auto-allow-behind-ten","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323","markdown":"### Windows: file-checking commands that read file lists now need approval\n\nOn Windows, `sha256sum`, `wc`, `du` and similar commands are no longer auto-allowed when told to read a list of files from a file\n\n**Unclear.** Whether the remote switch behind this refusal is on by default is not known.\n\n**What**\n\nClaude Code lets some read-only commands run without asking you. On Windows, these commands no longer get that treatment when an argument tells them to read a list of file paths from another file:\n\n- `sha256sum`, `sha1sum`, `md5sum` with `--check`\n\n- `wc` and `du` with `--files0-from`\n\n- `strings` with an `@file` argument\n\nThis refusal sits behind a remote switch. A remote switch is a setting Anthropic can turn on or off from its servers.\n\nOne read-only command check is also stricter now about arguments that look like flags or start with `+`. Matching commands against your permission rules has new logic for comparing the start of a command.\n\n**Why**\n\nThis closes a gap on Windows. A command that looked read-only could have been pointed at a list of other files and read them without asking you.\n\n- Area: Windows\n- Tier: You'll notice\n- Useful: 1\/5\n- Signal: 1\/5\n- Scope: individual\n- Heads-up: yes"}