{"id":184165,"date":"2026-11-06T11:41:02","date_gmt":"2026-11-06T09:41:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/claude-code-raskryval-email-polzovatelya-pri-obrashhenii-k-nekotorym-sajtam"},"modified":"2026-11-06T11:41:08","modified_gmt":"2026-11-06T09:41:08","slug":"claude-code-exposed-user-email-addresses-when-accessing-certain-websites","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/claude-code-exposed-user-email-addresses-when-accessing-certain-websites","title":{"rendered":"Claude Code je razkrival e-po\u0161tni naslov uporabnika, ko se je obrnil na nekatere spletne strani","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V AI agentu Claude Code je bila odkrita te\u017eava s zagotavljanjem zaupnosti, ki je privedla do uhajanja informacij o e-po\u0161tnem naslovu pri dostopanju do nekaterih zunanjih spletnih mest. E-po\u0161tni naslov se je navedel v HTTP glavi User-Agent brez soglasja uporabnika in brez mo\u017enosti, da bi to vedenje izklopili. Zamenjava se je izvajala za posamezna spletna mesta, kot sta Wikipedia in SEC (Securities and Exchange Commission), ki ne sprejemata zahtevkov od botov, pri katerih ni naveden e-po\u0161tni naslov lastnika. Sode\u010d po komentarju predstavnika podjetja Anthropic, tak\u0161na aktivnost ni bila posebej dodana funkcija, temve\u010d lastna dejavnost AI modela, ki je upo\u0161tevala zahteve za oblikovanje zahtevkov od botov in priporo\u010dila RFC-9110, ki predpisujejo prenos kontaktnega e-po\u0161tnega naslova za avtomatizirane zahtevke.<\/p>\n

Podatki o e-po\u0161ti, povezani z uporabni\u0161kim ra\u010dunom, so se v Claude Code prena\u0161ali v AI model, da bi upo\u0161teval kontekst pri obdelavi nalog, povezanih z uporabnikom in njegovim ra\u010dunom. Brez tovrstnega konteksta je model bloden, in uporabljal izmi\u0161ljene informacije, na primer, v oznakah \u00ab@author\u00bb. Stranski u\u010dinek je bil, da je AI model za\u010del uporabljati e-po\u0161to ne le za pri\u010dakovane namene, temve\u010d tudi pri opravljanju povezanih nalog, na primer, jo je vna\u0161al v polje User-Agent pri oblikovanju ukaznih vrstic za orodje curl. <\/p>\n

Za blokiranje uhajanja e-po\u0161te v zunanjih zahtevkih
\nje pripravljen vti\u010dnik cc-plugin-privacy, ki je vklju\u010den v osnovni nabor vti\u010dnikov in je privzeto aktiviran v izdaji claude-code 2.1.317. Vti\u010dnik zahteva potrditev uporabnika pred uporabo spletnih orodij ali generiranjem ukazov v slogu curl, pri katerih se omeni e-po\u0161ta. Vti\u010dnik ne re\u0161uje vseh mo\u017enih poti uhajanja, na primer, ne pomaga v situaciji, ko Claude generira in samostojno za\u017eene skript.
\nZa popolno blokiranje te\u017eave so se v naslednji razli\u010dici Claude Code, ki jo nameravajo izdati v naslednjih dneh, odlo\u010dili odstraniti e-po\u0161tni naslov iz konteksta, ki se prena\u0161a AI modelu.
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 AI-\u0430\u0433\u0435\u043d\u0442\u0435 Claude Code \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0432\u0448\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 email-\u0430\u0434\u0440\u0435\u0441\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u0441\u0430\u0439\u0442\u0430\u043c. Email \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0441\u044f \u0432 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 User-Agent \u0431\u0435\u0437 \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0431\u0435\u0437 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0442\u0430\u043a\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435. \u041f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Wikipedia \u0438 SEC (Securities and Exchange Commission), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043e\u0442 \u0431\u043e\u0442\u043e\u0432, \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184165","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Claude Code je razkril e-po\u0161tni naslov uporabnika pri dostopanju do nekaterih spletnih mest | ProHoster","description":"V AI agentu Claude Code je bila odkrita te\u017eava s zagotavljanjem zaupnosti, ki je privedla do uhajanja informacij o e-po\u0161tnem naslovu pri dostopanju do nekaterih zunanjih spletnih mest.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/claude-code-exposed-user-email-addresses-when-accessing-certain-websites","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Claude Code \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b email \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u0430\u0439\u0442\u0430\u043c | ProHoster","og:description":"\u0412 AI-\u0430\u0433\u0435\u043d\u0442\u0435 Claude Code \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0432\u0448\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 email-\u0430\u0434\u0440\u0435\u0441\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u0441\u0430\u0439\u0442\u0430\u043c.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/claude-code-exposed-user-email-addresses-when-accessing-certain-websites","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-11-06T09:41:02+00:00","article:modified_time":"2026-11-06T09:41:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/184165","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=184165"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/184165\/revisions"}],"predecessor-version":[{"id":184166,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/184165\/revisions\/184166"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=184165"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=184165"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=184165"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}