The re-review confirmed the log-injection fix works for C0 and DEL, but U+0085 (NEL) and U+2028/U+2029 pass through. Those are line terminators to some log shippers and to JavaScript's own lexical grammar, so they can still split a record downstream. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>