What
Two new security checks detect potentially dangerous command patterns before execution.
Details
- Unicode whitespace detection: Commands containing exotic Unicode whitespace characters (such as non-breaking spaces
\u00A0, em spaces\u2000-\u200A, and others) are now flagged, as these can cause parsing inconsistencies betweenshell-quoteand bash - Mid-word hash detection: Commands containing
#characters mid-word (e.g., not preceded by whitespace) are flagged becauseshell-quoteand bash parse these differently — bash treats#as a comment start in some contexts whileshell-quotedoes not - Both checks trigger a user confirmation prompt ("ask" behavior) rather than blocking outright
Evidence
New security check IDs UNICODE_WHITESPACE and MID_WORD_HASH (search for "UNICODE_WHITESPACE" and "MID_WORD_HASH")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.