Claude Code's Read deny rules let 4 of 11 routes through: grep -r, a Python one-liner and two CLAUDE.md @imports
This story is from 2026-10-02. It is preserved in the archive; the latest stories are on the live feed.
4 of 11 routes to a file covered by Read(./secrets/**) or Read(**/.env) still put its contents in front of the model on Claude Code 2.1.285: grep -r , a Python one-liner, and an @ import in a root or a subdirectory CLAUDE.md , each in 2 of 2 runs. The other 7 held (the Read, Grep and Glob tools, ca…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-10-02 02:17 · DEV Community — AI
Claude Code's Read deny rules let 4 of 11 routes through: grep -r, a Python one-liner and two CLAUDE.md @imports