> The issue title was interpolated directly into Claude's prompt via ${{ github.event.issue.title }} without sanitisation.
It's astonishing that AI companies don't know about SQL injection attacks and how a prompt requires the same safeguards.
It's astonishing that AI companies don't know about SQL injection attacks and how a prompt requires the same safeguards.
They put it in the prompt to watch out. That should do it. No?
/s