AI Briefing
KOSign in

Anthropic releases cc-plugin-privacy to block Claude Code from sending user emails in User-Agent headers

·2026.11.06 07:13

Key point

The built-in mod, enabled by default in Claude Code v2.1.317 and later, deterministically blocks the model from including user email addresses in web requests.

Details

  • Anthropic introduced the cc-plugin-privacy built-in mod to deterministically block Claude Code from sending user email addresses in User-Agent headers during web searches.
  • The mod is enabled by default starting from v2.1.317 and can be disabled via the /plugins command, addressing a privacy violation where user emails were exposed to third-party websites.
  • Anthropic stated the email transmission was not an intended feature but a result of model unpredictability, specifically when sites like Wikipedia require contact emails in User-Agent headers for script clients.
  • The source code for the privacy mod is available for review, with Anthropic requesting feedback on potential gaps in the check logic.
securityanthropicclaude-codeprivacybug-fix
Read originalShare on Threads

This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.

Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.

Related

RedditPostman installer auto-approves Codex hook, prompting security reviewAnthropic ResearchAnthropic analysis of 207,049 sessions finds Claude usage tracks AI capability, with data analysis and writing dominating scientific researchRedditPostman to clarify AI plugin opt-in after reports of unconfirmed installs in Claude Code and CodexPyTorchKRClaude Code team doubles merges and cuts reverts by 40% with AI review systemCursorCursor removes malicious Claude Code extension version 2.1.313 after SSH backdoor attemptHacker NewsClaude Code background agent status updates consume 15-20% of tokens