{"version":"2.1.90","anchor":"docker-command-security-hardening","canonical_anchor":"docker-command-security-hardening","heading":"Docker Command Security Hardening","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.90\/e\/docker-command-security-hardening","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.90","markdown":"### Docker Command Security Hardening\n\nDocker commands now reject `--host`, `--context`, `--config`, and `--tls` flags, as well as short flags `-H` and `-c`, which could be used to redirect Docker operations to a remote daemon and escape the sandbox.\n\n**Evidence**\n\nDocker flag validation (search for `startsWith(\"--host\")` near the docker command validator)"}