Tag

#security

2 posts tagged.

allowUnsandboxedCommands: false does not cover the ! shell-mode prompt (2026)

Claude Code v2.1.260 narrowed strict sandbox mode so it no longer covers commands you type at the ! prompt. Anthropic documents two exceptions the changelog never mentions, and the variable that closes the gap is filed under credential scrubbing.

September 7, 202611 min read15

Tutorials

CLAUDE_CODE_TMPDIR is ignored in project settings (2026)

Claude Code v2.1.251 stopped project settings setting CLAUDE_CODE_TMPDIR, CLAUDE_CONFIG_DIR, HOME, TMPDIR and the XDG family from a .claude/settings.json env block. Nothing errors. Here is the full ignore list, the four scopes it splits into, and the debug flag that shows you the drop.

September 6, 202610 min read30