A symlink could send a Claude Code write outside your project, and 2.1.280 blocks it
Claude Code judged a write through a symlinked path by the path you typed rather than by where the file actually landed, so acceptEdits, permission allow rules and auto mode could each approve an edit that ended up outside the project tree. Anthropic's changelog lists the fix in version 2.1.280…
Sources
- T2A symlink could send a Claude Code write outside your project, and 2.1.280 blocks itUploadVR / Road to VR / MIXED