Claude Code 2.1.314: New Security Setting for File Writes

Claude Code 2.1.314 has introduced a new security setting.

It is now possible to prevent Claude from writing files outside working directories even when bypass permissions mode is enabled.

To do this, enable the blockWritesOutsideWorkingDirectories parameter in settings.json:

{
  "permissions": {
    "blockWritesOutsideWorkingDirectories": true
  }
}

The setting was tested with the Write and Edit tools, and writes were blocked in both cases.

However, there is an important limitation: this setting does not apply to Bash commands.

Bash can still write files outside the project.

For stronger protection, use this setting together with the sandbox in settings.json:

{
  "permissions": {
    "blockWritesOutsideWorkingDirectories": true
  },
  "sandbox": {
    "enabled": true
  }
}