News
Prompt injections in HTTP headers are rare and mostly a joke.
Of 7,959 sites sending a header meant for AI, 30 try to give orders to an agent, 22 of them as a joke.
The analysis covers 217,097,223 responses, or 10% of the September 2026 Common Crawl crawl.
In Claude Code, Claude models ignore the test header unless the prompt gives authority to the site.
With a prompt giving authority to the site, 7 out of 9 runs obeyed the header.