Blog
llm-security
Technical notes on web development, DevOps, and AI integration.
2 articles
- 00:33ai
Prompt labels leaked into my AI chat: sanitize both ends
A RINGKAS label leaked into the chat bubble. The fix was not a stricter prompt but sanitizing input and output at both ends of the pipeline.
TL;DR: Label RINGKAS bocor ke UI karena prompt saja tak cukup andal membatasi format keluaran LLM. Solusinya menutup dua pintu: sanitasi teks eksternal sebelum masuk prompt, lalu render jawaban lewat react-markdown plus rehype-sanitize dengan allowlist HTML. Pelajarannya, kendali format sebaiknya ada di kode, bukan sekadar daftar larangan yang terus ditambah.
#llm-security#react#prompt - 21:51ai
What a Security Audit Found in My Chat AI
A security audit uncovered 11 findings in the chat AI pipeline, from cache keys to prompt injection.
#prompt-injection#redis#fastapi