Seems this is a common prompt vulnerability pattern:
1. Let Internet content become part of the prompt, and
2. Let the prompt create HTTP requests.
With those two prerequisites you are essentially inviting the Internet into the chat with you.
1. Let Internet content become part of the prompt, and
2. Let the prompt create HTTP requests.
With those two prerequisites you are essentially inviting the Internet into the chat with you.
> let the prompt create HTTP requests
is batteries-included because every language model worth their salt is already able to create markdown and it’s very tempting to utilize this in order to provide layout and break up the wall-of-text output.