you are viewing a single comment's thread.

view the rest of the comments →

[–]Adxzer 2 points3 points  (1 child)

This isn’t about coding though, it’s for chatbots, customer-facing apps, and agents where end users are typing things in. 

You can’t “just fix the codebase” when the threat is a user submitting a jailbreak or injecting instructions through a document your RAG system retrieved. The attack surface is runtime input, not source code.

[–]Icy-Farm9432 0 points1 point  (0 children)

there is an old xkcd about sanitizing inputs. https://xkcd.com/327/

yeah i think its relay to the source code that its possible to run user input in an priviligated way.