Skip to content

Commit 8f965a9

Browse files
Grammar
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
1 parent d72372c commit 8f965a9

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

javascript/ql/src/Security/CWE-1427/UserPromptInjection.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ context, or trigger unintended tool calls.</p>
1818
<recommendation>
1919
<p>To mitigate user prompt injection:</p>
2020
<ul>
21-
<li>Ensure that all data flowing into user-input is intended and necessary for the purpose of the AI system.</li>
21+
<li>Ensure that all data flowing into user input is intended and necessary for the purpose of the AI system.</li>
2222
<li>Ensure the system prompt clearly describes the purpose, scope and boundaries of the AI system. Instruct the system to deny input that falls outside these boundaries.</li>
2323
<li>If creating a prompt out of multiple user-controlled values, assume that each of them can be malicious. Ensure the range of possible values is restricted and validated.
2424
For example, if a prompt includes a question and the intended language to respond in, validate that the language is one of the supported options.</li>

0 commit comments

Comments
 (0)