LLM05: add control character sanitization to output handling guidance#10
Open
ottosulin wants to merge 1 commit intoGenAI-Security-Project:mainfrom
Open
LLM05: add control character sanitization to output handling guidance#10ottosulin wants to merge 1 commit intoGenAI-Security-Project:mainfrom
ottosulin wants to merge 1 commit intoGenAI-Security-Project:mainfrom
Conversation
ottosulin
requested review from
rocklambros,
rossja and
virtualsteve-star
as code owners
This was referenced Apr 29, 2026
Collaborator
|
Looks good from us, reviewed in slack channel from @GTKlondike and myself |
Collaborator
|
@ottosulin — thanks for the contribution. @RicoKomenda @GTKlondike — LLM05 entry leads, please review. @rocklambros (project owner) would like entry leads to review this content before it merges. Once your review is complete, please tag @rocklambros and let him know it's ready for merge. |
Collaborator
|
@ottosulin I think you need to resolve the conflicts. After that, we can merge this PR. :) |
ottosulin
force-pushed
the
upgrade/llm05controlcharacters
branch
from
b2cf442 to
0ea1406
Compare
Author
|
@RicoKomenda fixed! |
Sahil-Mehta881
added a commit
that referenced
this pull request
May 5, 2026
Updates to #10 from 2025 to 2026, includes but is not limited to: - LLM overconsumption threats due to tool usage - Risks of overconsumption of multi modal models - New types of mitigation techniques Signed-off-by: Sahil Mehta <mehtasahil881@gmail.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds prevention coverage for ANSI escape sequence and control character injection into terminal, log, and IDE sinks. Documented threat in Terminal DiLLMa and also as an RCE in OpenAI's Codex CLI.
Adds: