Unverified50% confidenceFactExact time
Bash permission rules with the intermediate pattern :* were previously skipped in settings files; the new version makes them take effect from all sources and issues a warning about the matching method at startup.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/24/2026
First Seen
Valid until: 12/23/2026
Sources
Related Entities
Related Claims
UnverifiedBefore the fix, recursive deletion commands like rm -rf "$(pwd)" whose targets came solely from command substitution output would execute silently without prompting in auto mode and --dangerously-skip-permissions mode; after the fix, the user will be actively asked even if a Bash allow rule exists, unless CLAUDE_CODE_DISABLE_SUBSTITUTION_RM_PROMPT=1 is set.68% similarUnverifiedThe parameter expansion syntax ${path##*/} built into Bash and Zsh can achieve the same effect as basename and eliminates subprocess overhead in loop scenarios.63% similarUnverifiedv2.1.269 fixes a security vulnerability where Edit() deny rules and write-path checks did not cover files written by the Bash tee command.62% similarUnverifiedbash命令的安全性检测本质上是一个不可判定问题，无法写出完美的规则引擎来判断任意bash命令是否安全59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/948140API
curl https://kongchang.com/api/v1/knowledge/claims/948140MCP
get_claim(id=948140)