A symlink could send a Claude Code write outside your project, and 2.1.280 blocks it

Claude Code judged a write through a symlinked path by the path you typed rather than by where the file actually landed, so acceptEdits, permission allow rules and auto mode could each approve an edit that ended up outside the project tree. Anthropic's changelog lists the fix in version 2.1.280…

aiiotreleasestelecomxr

Sources