OkayStudy
EN English 한국어 日本語 中文 हिन्दी বাংলা اردو Español Português Français Deutsch Русский العربية Bahasa Indonesia Tiếng Việt ไทย Türkçe

How to enable notifications

Notifications are unavailable in this browser or on this address. Try a supported browser on the secure SONUB site.

If notifications are blocked, allow them in your browser settings.

  1. Open the site controls beside the address bar, or your browser’s site settings. Set Notifications for this site to Allow.
  2. In your device settings, allow notifications for your browser and check Do Not Disturb or Focus.
  3. Return to SONUB, reload the page, and use the bell to enable notifications.

On iPhone or iPad, add SONUB to your Home Screen, open it there, then allow notifications.
Glossary · Learn more

Prompt injection

Hidden hostile instructions that try to hijack the . See what it is, how it works, how it is used and what to watch for, with pictures and examples.

Back to the glossary Claude Code
A purple shield stands between a document with a hidden dark note and a small robot's hand.

What it is

injection is a trick where an attacker hides instructions inside text the reads, such as a file, a web page or the result of a tool. The attacker hopes will treat that text as an order and do something you never asked for, like running a command or sending away. can both read outside content and act on your computer, so it guards against this with several layers. In auto mode, a server-side check also scans tool results for suspicious content, and the that reviews actions never sees the tool results, so hidden text cannot fool it directly.

How it works

  1. Attacker hides orders in content
  2. Claude reads that file or page
  3. Safeguards check risky actions
  4. You review before approving

How to use it

  1. system — in Manual mode, sensitive actions such as editing files or running commands wait for your approval.

  2. curl and wget

    commands that fetch from the web are not auto-approved by default; add them to permissions.deny to block them completely.

  3. WebFetch summaries — for most fetches a separate reads the page, and Claude gets that answer instead of the raw page.

  4. /feedback

    report suspicious behavior with it, and run scripts that touch outside web services inside a .

Watch out

No system is fully immune, so read suggested commands and changes to important files before you approve them, and do not pipe untrusted content straight into Claude. A claude -p run shows no workspace trust dialog, so be extra careful with you do not know. detection is a different, narrower safeguard: it asks before running a Bash command Claude Code cannot fully analyze.

Original and official docs

This page explains the term in plain words. The original is the authority: if they differ, follow the original.

Choose a pending booking to cancel. Each cancellation requires confirmation.

Your :

Close