Unverified50% confidenceFactExact time
Before the fix, recursive deletion commands like rm -rf "$(pwd)" whose targets came solely from command substitution output would execute silently without prompting in auto mode and --dangerously-skip-permissions mode; after the fix, the user will be actively asked even if a Bash allow rule exists, unless CLAUDE_CODE_DISABLE_SUBSTITUTION_RM_PROMPT=1 is set.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/23/2026
First Seen
Valid until: 12/22/2026
Sources
Related Entities
Related Claims
UnverifiedIf the command does not take effect after configuring the environment variable, it may be due to caching, and restarting the computer can resolve the issue.66% similarUnverifiedThe method to manually clear the macOS quarantine attribute is to execute the command xattr -cr /Applications/AppName.app in the terminal; DSH-Work's repair script essentially automates this command.62% similarUnverifiedv2.1.269 fixes a security vulnerability where Edit() deny rules and write-path checks did not cover files written by the Bash tee command.61% similarUnverifiedFixed an issue where file permission rules containing uncompilable patterns (such as an unclosed [) caused all file editing operations to fail due to invalid regular expressions; such deny rules now fall back to guarding only the literal path61% similarUnverifiedUsing the --ignore-scripts flag can prevent installation scripts from running automatically, cutting off the trigger path for many malicious payloads, but it may also affect the normal installation of certain legitimate packages.59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/945055API
curl https://kongchang.com/api/v1/knowledge/claims/945055MCP
get_claim(id=945055)