Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(save_html): address a critical issue where LLM secret keys are stored #119

Open
jooyoungseo opened this issue Oct 9, 2024 · 0 comments
Assignees

Comments

@jooyoungseo
Copy link
Member

Bug Report

Description

I have found this critical issue when working with Quarto document. Saving the LLM API keys within the iframe can cause a critical security breach in the case where users share the rendered HTML document with others.

We need to find a more secure way to store the LLM API keys.

Steps to Reproduce

Rendre the quarto document in example/quarto/demo.qmd

Actual Behavior

API keys are stored in the rendered HTML document.

Expected Behavior

API keys should not be stored in the rendered HTML document.

Screenshots

N/A

Environment

Universal

Additional Information

N/A

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants