orbisai0security

Results 14 comments of orbisai0security

Thanks for pointing this out. It was a miss from my side. These are indeed formatting-only changes to SQL (capitalisation/indentation/whitespace) and don’t change any logic. I've updated the PR title/desc.

@wwwillchen You're right that if an attacker can control the table name, it likely indicates broader issues, such as compromised database or application access. However, escaping identifiers is still important...

I'm using the Pro ($20) plan. I've been using Sonnet 4.5 since it launched. I've been working on the same codebase for the last few months, but token usage (as...

The `/llm/load_model` endpoint lets the application dynamically load machine learning models by specifying a `model_type` in the request. It enhances: **Flexibility:** Users can load models on demand without restarting the...

I agree that the script is internal and that the worst-case is loading an untrusted checkpoint — but precisely for that reason, I recommend using weights_only when supported as a...