Claude Code 透過 User-Agent 標頭洩露使用者信箱
Claude Code sends your email address to websites
Claude Code 於執行網頁搜尋時，將使用者信箱放入 User-Agent 標頭，導致信箱被任意第三方網站接收。
此行為缺乏選項，無法選擇退出，直接危害使用者隱私。
AI 伴隨問答
針對這篇報導有疑問？可直接點選快捷問題或向 AI 追問背景脈絡與技術細節：
Bug Description
I receive dozens of scam emails per day because claude code divulged my email to arbitrary 3rd parties in the User-Agent request header while conducting web searches without my permission. This should not be a setting with opt-out or opt-in behavior, it needs to be removed from the harness entirely. It is not for the good of anyone involved: it does nothing for services which dislike agentic traffic, does not preserve my anonymity on the web, and is a goldmine for scammers. I am migrating my company to Pi with OpenRouter since I have no faith in anthropic preserving my privacy.
Environment Info
- Platform: darwin
- Terminal: tmux
- Version: 2.1.318
- Feedback ID: f81eb83d-9b95-4788-8773-d3fae8f0cec4
Reacted by Klughertz Jonathan and Netkas