fix: taint prefetched web context

2026-09-14 12:12:20 +02:00 · 2026-08-15 01:57:09 +00:00
parent fef0e6f3c0
commit 329f9d298d
4 changed files with 46 additions and 3 deletions
@@ -465,6 +465,7 @@ class ChatProcessor:
                    preface.append(untrusted_context_message(
                        f"web page: {url}",
                        f"Content from {url}:\n\n{content}",
+                        provenance_origin="external",
                    ))

        # Skills index — progressive disclosure. Only injected when the