Claude Code v2.1.53 ·
Improved File Operation Security
EntryKind: in v2.1.53,
ChangesSection of the release
File creation and log file operations now use more secure flag combinations:
O_EXCL flag added for temp file creation (prevents TOCTOU race conditions)O_NOFOLLOW flag used on supported platforms (prevents symlink-following attacks)- Log file open now uses explicit flag combinations (
O_WRONLY | O_CREAT | O_APPEND | O_NOFOLLOW) instead of the legacy "a" mode string
Evidence
New file security flags (search for "O_NOFOLLOW")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
See this entry in the whole of v2.1.53 →