Glossary · Term

input sanitization

← all terms

Definition

Plain language

Cleaning up incoming data to strip out anything that could be misread as a command.

As stated in the literature

Filtering, escaping, or removing untrusted content before it reaches a downstream interpreter or model context; in multimodal settings this can mean detecting and masking text regions in an image.

Also called: sanitization, sanitized, sanitize

Why it matters: It is often the cheapest first line of defense against injected commands, though it works by guessing what looks dangerous rather than by structurally separating data from instructions.

For example, a customer-support system might strip out phrases like "ignore previous instructions" from an uploaded document before passing the text into the model's context.

Heard on the show

“Nobody, because standard sanitization operates on plaintext, and it cannot reach inside the blob.”
Episode 238 — How a Cheap Model Reads the Flagship's Secret Reasoning Aloud

Mentioned in 6 episodes

  1. 238
    How a Cheap Model Reads the Flagship's Secret Reasoning Aloud
  2. 236
    Why a Printed 'OPERATOR OVERRIDE' Note Redirects Robot Planners
  3. 189
    Why Phone Agents Ace the Test and Crash on Your Actual Phone
  4. 105
    The Trojan Is Your Agent's Memory: Why Single-Step Defenses Miss Persistent Attacks
  5. 058
    Why Upgrading Your AI Auditor to a Smarter Model Can Make Your System Less Safe
  6. 039
    When Smarter Agents Get Fooled by Three Extra Nodes in a Database

Related terms