Integrating OpenAI into Your Application: A Security Perspective
hackerone.com | blog | #ai-security | #prompt-injection | #xss | #llm | #application-security | #openai | #rate-limiting
Summary
When integrating OpenAI models, treat output as untrusted: rate-limit API use, cap output length, sanitize against XSS and injection, and keep sensitive data out of prompts to limit jailbreak risk.
- Published
- Collected
--- id: 1971 title: "Integrating OpenAI into Your Application: A Security Perspective" source_domain: hackerone.com source_url: "https://www.hackerone.com/blog/integrating-openai-your-application-security-perspective" published_at: "2024-01-16T05:23:48Z" tags: ["ai-security", "prompt-injection", "xss", "llm", "application-security", "openai", "rate-limiting"] phying_url: "https://phying.com/item/1971" lang: en --- # Integrating OpenAI into Your Application: A Security Perspective ## Summary When integrating OpenAI models, treat output as untrusted: rate-limit API use, cap output length, sanitize against XSS and injection, and keep sensitive data out of prompts to limit jailbreak risk. ## Intelligence Metadata - **Sources:** hackerone.com - **Published:** 2024-01-16T05:23:48Z - **Original:** https://www.hackerone.com/blog/integrating-openai-your-application-security-perspective - **Phying News:** https://phying.com/item/1971