Source Intelligence
Follow Discord
Reading a new release v2.1.251 Analysing changes · 2/5 Sorting the findings · 1/4 steps 470 findings $18.91 so far

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.98 Home All releases ←olderv2.1.97 v2.1.100newer→
Claude Code v2.1.98

Subprocess Environment Scrubbing Enhancements

The CLAUDE_CODE_SUBPROCESS_ENV_SCRUB feature (introduced previously) receives significant hardening in this release:

  • Requires bubblewrap (bwrap) on Linux for filesystem sandboxing; provides clear installation instructions if missing
  • Creates stub files for common dotfiles (.gitconfig, .bashrc, .npmrc, etc.) to prevent errors in sandboxed environments
  • Defines comprehensive filesystem access rules: deny-read for container sockets, deny-write for shell configs, git hooks, CI environment files, and package manager configs
  • Adds .git/info/exclude entries for scrub-mode stubs to keep git status clean
  • Forces permission mode to default when env scrubbing is active
  • New allowUnsandboxedCommands sandbox setting for fine-grained control
Evidence

Env scrub hardening (search for "bubblewrap is required for subprocess env scrubbing" and "claude-code scrub-mode stubs")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.98 →