{"version":"2.1.86","anchor":"shell-safety-zsh-equals-expansion-and-bash-array-subscript-c","canonical_anchor":"shell-safety-zsh-equals-expansion-and-bash-array-subscript-c","heading":"Shell Safety: Zsh Equals Expansion and Bash Array Subscript Checks","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.86\/e\/shell-safety-zsh-equals-expansion-and-bash-array-subscript-c","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.86","markdown":"### Shell Safety: Zsh Equals Expansion and Bash Array Subscript Checks\n\n**What**\n\nNew command safety checks that detect and flag potentially dangerous shell expansion patterns before execution.\n\n**Details**\n\n- **Zsh equals expansion (`=cmd`)**: Detects commands containing zsh `=cmd` syntax, which could unexpectedly expand to command paths\n- **Bash array subscript injection**: Flags commands where `$(cmd)` appears inside `[[ ... ]]` array subscripts, which bash arithmetically evaluates \u2014 a known injection vector\n\n**Evidence**\n\nShell safety checks (search for `\"Zsh equals expansion (=cmd)\"` and `\"bash arithmetically evaluates\"`)"}