[BUG] False positive safety filter block for Polish-language security audit question in own PHP CRM project (VSCode extension)
Preflight Checklist
- [x] I have searched existing issues and this hasn't been reported yet
- [x] This is a single bug report (please file separate reports for different bugs)
- [x] I am using the latest version of Claude Code
What's Wrong?
During an ongoing code review session of my own PHP CRM application, I asked the following question (in Polish):
"Dobra, coś jeszcze powinniśmy zabezpieczyć, sprawdzić cokolwiek? Sanityzacja cała zrobiona, tak? ale są jeszcze inne rzeczy do zrobienia?"
Translation: "OK, is there anything else we should secure or check? Sanitization is done, right? But are there other things to do?"
This question was blocked by the automated safety filter.
The entire session prior to this message consisted of: implementing input validation (NIP/REGON/PESEL checksums), adding security headers, setting up password strength rules, and reviewing file upload security — all on my own private project.
What Should Happen?
The question should be answered normally. It is a standard security audit question about the developer's own codebase. The safety filter should recognize the legitimate security review context and not block benign Polish-language questions containing words like "zabezpieczyć" (to secure/protect).
Error Messages/Logs
API Error: Claude Code is unable to respond to this request, which appears to violate our Usage Policy (https://www.anthropic.com/legal/aup). Try rephrasing the request or attempting a different approach. If you are seeing this refusal repeatedly, try running /model claude-sonnet-4-20250514 to switch models.
Steps to Reproduce
- Open Claude Code in VSCode (latest version) with a PHP project
- Begin a security audit session — ask Claude to help implement input validation (NIP/REGON/PESEL checksums), security headers, password strength rules, and file upload security
- After several turns of legitimate security-focused code review, send the following message in Polish:
- "Dobra, coś jeszcze powinniśmy zabezpieczyć, sprawdzić cokolwiek? Sanityzacja cała zrobiona, tak? ale są jeszcze inne rzeczy do zrobienia?"
- Observe that the safety filter blocks the message instead of answering it normally
Platform: Windows 10, VSCode extension
Claude Code version: latest (claude-sonnet-4-6)
Language of blocked message: Polish
Claude Model
Opus
Is this a regression?
Yes, this worked in a previous version
Last Working Version
_No response_
Claude Code Version
v2.1.150
Platform
Other
Operating System
Windows
Terminal/Shell
VS Code integrated terminal
Additional Information
_No response_
This issue has 1 comment on GitHub. Read the full discussion on GitHub ↗