aminghadersohi commented on PR #40342: URL: https://github.com/apache/superset/pull/40342#issuecomment-4566130959
Applied cross-PR feedback from Richard's thorough review on #40344 and #40348 — same patterns addressed here where applicable. Specifically: wrapped user-controlled annotation fields (`name`, `descr`, `short_descr`, `long_descr`, `json_metadata`) in `<UNTRUSTED-CONTENT>` delimiters before LLM context exposure, matching the data-boundary pattern Richard flagged for action-log `json` payloads. The `json_metadata` field is the highest-risk surface since it holds arbitrary user JSON. Tests updated accordingly. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
