{"version":"2.1.51","anchor":"brace-expansion-security-check","canonical_anchor":"brace-expansion-security-check","heading":"Brace Expansion Security Check","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.51\/e\/brace-expansion-security-check","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.51","markdown":"### Brace Expansion Security Check\n\n**What**\n\nCommands containing shell brace expansion patterns (e.g., `{a,b}` or `{1..5}`) are now detected and flagged, preventing potential command injection through expansion tricks.\n\n**Details**\n\n- Detects balanced brace pairs containing commas or range operators (`..`)\n- Properly handles nested braces and escaped characters\n- Blocks commands where brace expansion could alter command parsing\n\n**Evidence**\n\nNew function `ve9()` performs brace detection; error message `\"Command contains brace expansion that could alter command parsing\"` (search for `\"brace expansion\"`)"}