Claude Code update v2.1.216 closes two permission bypass classes in auto mode — Bash compound-statement redirects and invisible PowerShell Unicode injection — along with a quadratic ...