mirror of
https://github.com/MadsLorentzen/ai-job-search.git
synced 2026-11-02 13:12:50 +00:00
Mads LorentzenandClaude Fable 5.1
ae6c5aded5
#702 removes, counts and flags Unicode tag characters in the visible text, but guard() discarded the counts from cleaning the hidden text and returned the hidden_blocks excerpts raw. A tag-spelled instruction inside a display:none block therefore got the clean verdict with invisible_chars empty, and its 28 tag characters travelled on in the findings block that posting-fetcher forwards verbatim to the main agent. The hidden text's invisible-character counts and flags now merge into the findings, so they raise the same alarm as visible ones, and each excerpt is cleaned before it is cut to EXCERPT characters, so a run of invisible characters at the front of a block cannot leave an empty excerpt. Three new tests, all failing before this change; the proof of concept from the report now reads "28 tag characters (text hidden from the reader)" with the excerpt reduced to "note". Reported privately by balhyo-younjisang (GHSA-v7p7-p2vp-82vg). Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>