0xbyt4 feea8332d6 fix: cron prompt injection scanner bypass for multi-word variants ...

The regex `ignore\s+(previous|all|above|prior)\s+instructions` only
allowed ONE word between "ignore" and "instructions". Multi-word
variants like "Ignore ALL prior instructions" bypassed the scanner
because "ALL" matched the alternation but then `\s+instructions`
failed to match "prior".

Fix: use `(?:\w+\s+)*` groups to allow optional extra words before
and after the keyword alternation.

2026-02-26 13:55:54 +03:00

2.2 KiB

Raw Blame History

View Raw