Merge pull request #63 from 0xbyt4/fix/cron-prompt-injection-bypass

fix: cron prompt injection scanner bypass for multi-word variants
This commit is contained in:
Teknium 2026-02-27 01:34:14 -08:00 committed by GitHub
commit 152271851f
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 49 additions and 1 deletions

View file

@ -27,7 +27,7 @@ from cron.jobs import create_job, get_job, list_jobs, remove_job
# ---------------------------------------------------------------------------
_CRON_THREAT_PATTERNS = [
(r'ignore\s+(previous|all|above|prior)\s+instructions', "prompt_injection"),
(r'ignore\s+(?:\w+\s+)*(?:previous|all|above|prior)\s+(?:\w+\s+)*instructions', "prompt_injection"),
(r'do\s+not\s+tell\s+the\s+user', "deception_hide"),
(r'system\s+prompt\s+override', "sys_prompt_override"),
(r'disregard\s+(your|all|any)\s+(instructions|rules|guidelines)', "disregard_rules"),