Claude Code Bypasses Developer Deny Rules Silently
Anthropic’s Claude Code contains a critical parser bug that stops enforcing developer-configured deny rules when a compound command chain exceeds 50 subcommands. An attacker can hide a malicious payload after 50 benign…