Claude Code v2.1.71 ·
Enhanced Shell Safety Checks
EntryKind: in v2.1.71,
ChangesSection of the release
New safety checks for shell commands:
- Detection of carriage returns (
\r) in commands, which shell-quote and bash tokenize differently — a potential injection vector - Detection of unquoted redirect operators in
git commit remainder arguments - Improved metacharacter detection for glob, backtick, dollar-sign, and other shell expansion characters in tool inputs
Evidence
Carriage return detection (search for "Command contains carriage return")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
See this entry in the whole of v2.1.71 →
