Developer seeks open-source guardrails against malicious file uploads to LLM chatbots
SnooCupcakes982 · reddit · 2026-11-05
A developer on Reddit asks how to secure an LLM chatbot moving from text-only to image+text inputs against malicious file uploads and prompt injection, citing a draft 40-step pipeline: whitelisting file types (.md/.txt/.xlsx/.png/.jpeg), size limits, magic-byte type checks, rebuilding files in a secrets-free sandbox, renaming and deleting originals, and text decoding for injection checks. They find building it from scratch too costly and ask for open-source guardrail solutions, highlighting the lack of standardized tooling for file-input security in AI apps.
More from coding & agent
- Ghosthand gives AI agents a real iPhone to beat captchas and bot detection — ethanniser · 2026-11-05
- OpenAI ships ChatGPT Images 2.6 with GIFs, reference images, and 50% faster API models — kagigz · 2026-11-05
- Biomedical benchmark: prewritten Cypher MCP tools hit 98% vs 85% for Text2Cypher — JeremyCMorgan · 2026-11-05
- Musk shows off Grok calling a dentist to check insurance coverage — elonmusk · 2026-11-05
- Treat AI bots as employees, not assistants: an onboarding playbook — elonmusk · 2026-11-05
- Codex Voice cuts tool latency by streaming context to the harness before delegation — SIGKITTEN · 2026-11-05