Don't leak which blog has been logged into via get_bloginfo()

wp-includes/class-http.php

@@ -188,7 +188,7 @@ class WP_Http {
 			 * @param string $user_agent WordPress user agent string.
 			 * @param string $url        The request URL.
 			 */
-			'user-agent'          => apply_filters( 'http_headers_useragent', 'WordPress/' . get_bloginfo( 'version' ) . '; ' . get_bloginfo( 'url' ), $url ),
+			'user-agent' => apply_filters( 'http_headers_useragent', 'WordPress/' . $wp_version . '; http://wordpress.org' ),
 			/**
 			 * Filters whether to pass URLs through wp_http_validate_url() in an HTTP request.
 			 *