Claude Code v2.1.273 fixes sandbox permission bypass, adds gateway hint headers
Anthropic
Following Sep 14's v2.1.271 (fast mode for remote sessions, per-command network domain allowlisting in sandboxed auto mode, --accept-command <sha256> for plugin installs), v2.1.273 landed Sep 15 with opt-in gateway request-class headers (CLAUDE_CODE_GATEWAY_HINT_HEADERS=1), session forking from the Claude app, and a fix for a sandbox bypass where unanalyzable Bash commands skipped permission prompts.
Why it matters
The v2.1.273 permission-prompt bypass fix matters to anyone running Claude Code with sandboxing in CI or on untrusted repos.
Importance: 2/5
Minor versions, but include a security-relevant sandbox bypass fix