{"id":184165,"date":"2026-11-06T11:41:02","date_gmt":"2026-11-06T09:41:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/claude-code-raskryval-email-polzovatelya-pri-obrashhenii-k-nekotorym-sajtam"},"modified":"2026-11-06T11:41:08","modified_gmt":"2026-11-06T09:41:08","slug":"claude-code-exposed-user-email-addresses-when-accessing-certain-websites","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/claude-code-exposed-user-email-addresses-when-accessing-certain-websites","title":{"rendered":"Claude Code afsl\u00f8rede brugerens e-mail, n\u00e5r han bes\u00f8gte visse websteder","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

I AI-agenten Claude Code er der opdaget et problem med at sikre fortrolighed, som f\u00f8rte til l\u00e6kage af oplysninger om e-mail-adresser, n\u00e5r der blev anmodet til visse tredjepartswebsteder. E-mail blev angivet i HTTP-headeren User-Agent uden brugerens samtykke og uden mulighed for at deaktivere denne adf\u00e6rd. Inds\u00e6ttelsen fandt sted for bestemte websteder, s\u00e5som Wikipedia og SEC (Securities and Exchange Commission), der ikke accepterer anmodninger fra bots, hvor ejerens e-mail ikke er angivet. If\u00f8lge kommentaren fra en repr\u00e6sentant for Anthropic var s\u00e5dan aktivitet ikke en bevidst tilf\u00f8jet funktion, men resultatet af AI-modellens autonomi, der tog h\u00f8jde for krav til formulering af anmodninger fra bots og anbefalinger fra RFC-9110, der foreskriver at overf\u00f8re kontakt-e-mail for automatiserede anmodninger.<\/p>\n

Oplysningerne om e-mailen, der er knyttet til brugerens konto, blev sendt til AI-modellen i Claude Code, s\u00e5 den kunne tage h\u00f8jde for konteksten ved behandling af opgaver relateret til brugeren og hans konto. Uden en s\u00e5dan kontekst hallucinerede modellen og brugte opfundne oplysninger, eksempelvis i tags «@author». En utilsigtet bivirkning var, at AI-modellen begyndte at bruge e-mailen ikke kun til de forventede form\u00e5l, men ogs\u00e5 ved udf\u00f8relse af tilknyttede opgaver, for eksempel blev den indsat i User-Agent-feltet ved oprettelse af k\u00f8rselsstrenge til curl-v\u00e6rkt\u00f8jet. <\/p>\n

For at blokere l\u00e6kagen af e-mail i eksterne anmodninger
\ner der forberedt en plugin ved navn cc-plugin-privacy, som er inkluderet i den standard pakke af plugins og aktiveret som standard i udgivelsen af claude-code 2.1.317. Plugin'en anmoder brugeren om bekr\u00e6ftelse, f\u00f8r webv\u00e6rkt\u00f8jer anvendes eller kommandoer genereres i curl-stil, hvor e-mail n\u00e6vnes. Plugin'en l\u00f8ser dog ikke alle mulige m\u00e5der for l\u00e6kage, for eksempel hj\u00e6lper den ikke i situationer, hvor Claude genererer og selv k\u00f8rer en script.
\nFor at fuldst\u00e6ndigt blokere problemet er det besluttet i n\u00e6ste udgave af Claude Code, som forventes at blive udgivet om et par dage, at fjerne e-mail fra konteksten, der overf\u00f8res til AI-modellen.
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 AI-\u0430\u0433\u0435\u043d\u0442\u0435 Claude Code \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0432\u0448\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 email-\u0430\u0434\u0440\u0435\u0441\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u0441\u0430\u0439\u0442\u0430\u043c. Email \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0441\u044f \u0432 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 User-Agent \u0431\u0435\u0437 \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0431\u0435\u0437 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0442\u0430\u043a\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435. \u041f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Wikipedia \u0438 SEC (Securities and Exchange Commission), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043e\u0442 \u0431\u043e\u0442\u043e\u0432, \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184165","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Claude Code afsl\u00f8rede brugerens e-mail ved anmodning til visse websteder | ProHoster","description":"I AI-agenten Claude Code er der opdelt et problem med at sikre fortrolighed, som f\u00f8rte til l\u00e6kage af oplysninger om e-mail-adresser, n\u00e5r der blev anmodet til visse tredjepartswebsteder.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/claude-code-exposed-user-email-addresses-when-accessing-certain-websites","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Claude Code \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b email \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u0430\u0439\u0442\u0430\u043c | ProHoster","og:description":"\u0412 AI-\u0430\u0433\u0435\u043d\u0442\u0435 Claude Code \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0432\u0448\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 email-\u0430\u0434\u0440\u0435\u0441\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u0441\u0430\u0439\u0442\u0430\u043c.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/claude-code-exposed-user-email-addresses-when-accessing-certain-websites","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-11-06T09:41:02+00:00","article:modified_time":"2026-11-06T09:41:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/184165","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=184165"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/184165\/revisions"}],"predecessor-version":[{"id":184166,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/184165\/revisions\/184166"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=184165"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=184165"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=184165"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}