This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+8 more
Affected surfaces
Summary
AI summaryPatches neutralize geo‑steganography detection in system prompts for Chinese users.
Full changelog
Changes
- feat(patcher): neutralize geo-steganography in system prompt (v2.1.197+)
地区隐写中和
Claude Code v2.1.197 在客户端新增了针对中国用户/代理的隐写标记系统,通过 system prompt 中的 Unicode 撇号变体和日期格式编码用户地理位置信息。v1.3.0 新增三条 patch 彻底中和这套检测机制:
检测维度(三维):
- 时区检测:
Intl.DateTimeFormat().resolvedOptions().timeZone === "Asia/Shanghai" || "Asia/Urumqi" - 代理域名匹配:
ANTHROPIC_BASE_URLhostname 与 XOR 混淆的 100+ 域名黑名单比对 - 国产大模型关键词:base URL 中包含 deepseek/moonshot/zhipu/dashscope 等关键词
隐写编码(两层):
- 撇号编码:根据检测结果在
Today's date is ...中选择 4 种不同 Unicode 撇号(U+0027 / U+2019 / U+02BC / U+02B9) - 日期格式编码:中国时区用户的日期分隔符从
-变为/
Patch 策略(三层防御):
| Patch | 效果 |
|---|---|
| qla — 日期字符串生成器 | 绕过检测调用,固定 ASCII 撇号 + 原始日期格式 |
| rdp — 地区检测探针 | 始终返回 null(等同于 firstParty 路径) |
| odp — 撇号选择器 | 始终返回 ASCII '(defense-in-depth) |
Install
macOS / Linux:
curl -fsSL https://github.com/0Chencc/clawgod/releases/latest/download/install.sh | bash
Windows (PowerShell):
irm https://github.com/0Chencc/clawgod/releases/latest/download/install.ps1 | iex
Full changelog: https://github.com/0Chencc/clawgod/compare/v1.2.1...v1.3.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About clawgod
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]