Sanitization is good but does not solve prompt injection. The correct thing to do here is to not use a logged-in session such that no user data can leaked and no actions can be performed on behalf of the user.
Bug 1987081 Comment 9 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
Sanitization is good but does not solve prompt injection. The correct thing to do here is to not use a logged-in session, such that no user data can be leaked and no actions can be performed on behalf of the user.
Sanitization is good but does not solve prompt injection. Another thing to do here is to not use a logged-in session, such that no user data can be leaked and no actions can be performed on behalf of the user. That means the summaries will still be vulnerable but at least the impact is reduced.