emma-hermes

Commit Graph

Author	SHA1	Message	Date
Adolanium	1f57ed2a53	fix(export): escape tool-call name in HTML session export The HTML session export interpolated the tool-call name into the page without escaping, while every sibling field went through _escape_html. A tool-call name is attacker-influenced, so a prompt-injected model can emit a name containing HTML that executes when the export is opened in a browser. Escape the tool-call name like the other fields.	2026-07-09 16:46:07 -07:00

Author

SHA1

Message

Date

Adolanium

1f57ed2a53

fix(export): escape tool-call name in HTML session export

The HTML session export interpolated the tool-call name into the page
without escaping, while every sibling field went through _escape_html. A
tool-call name is attacker-influenced, so a prompt-injected model can emit
a name containing HTML that executes when the export is opened in a browser.

Escape the tool-call name like the other fields.

2026-07-09 16:46:07 -07:00

1 Commits (fc8f8ad33f41fbb019d75012aad07b62dbfdd017)