1

I’m passing string parameters to my plugin for example a search term.

In my OpenAPI YAML I have:

- name: search
   in: query
   description: The search term to filter search results by. 
   required: true
   schema:
      type: string

Would ChatGPT respect the string type set in OpenAPI? Do I also need to sanitize in my for example against xss in my code?

2

I don’t think chatGPT would not sanitize it out of the box.
Two workarounds:

  • Ask it nicely in your description
  • Make sure you handle it yourself

Good luck

1 Like
3

I would treat anything coming from ChatGPT as if it was coming from a person. All the usual rules for you handle input should apply.

2 Likes