OpenAI 发布论文详解 URL 数据外泄缓解措施
OpenAI 发布论文《Preventing URL-Based Data Exfiltration in Language-Model Agents》,详细说明其新增的 URL 数据外泄缓解措施。作者 Johann Rehberger 指出,OpenAI 现在用自己的网页索引做 URL 校验,爬虫收录的 URL 会进入允许列表,用户消息中直接输入的 URL 也被视为安全,但模型动态生成的 URL 会被判定为不安全。他同时说明该问题并未完全解决,用单个 URL 映射字母和数字的绕过方式仍然可行,并建议对同一会话内重复访问同一 URL 做缓存或限制。
have a bug bounty program, so communication was via email, and unfortunately there was little traction or appetite to fix the problem in ChatGPT. I also reported the same issue to Microsoft as Bing Chat was impacted, and Microsoft applied a fix (via a Content-Security-Policy header) in May 2023 to generally prevent loading of images. Since then, dozens of such vulnerabilities across the AI ecosystem, being one of the most common AI application security vulnerabilities. Tackling the Problem In De
匹配字段正文




