Claude Code 2.1.314 Adds Write Guard
Claude Code 2.1.314 adds `permissions.blockWritesOutsideWorkingDirectories`, making Write, Edit, and NotebookEdit refuse paths outside approved working directories—even in bypass-permissions mode.
This is a meaningful safety improvement for autonomous coding workflows, but it is a targeted file-tool boundary rather than a complete filesystem sandbox.
- –Protects against accidental or prompt-injected edits to files outside the project
- –Applies across permission modes, including `bypassPermissions`
- –Covers Write, Edit, and NotebookEdit specifically
- –Developers can extend the boundary through additional working directories
- –Shell-based commands may still require separate sandboxing or permission controls
DISCOVERED
1h ago
2026-10-30
PUBLISHED
1h ago
2026-10-30
RELEVANCE
AUTHOR
dani_avila7