diff --git a/src/agents/tools/web-tools.enabled-defaults.e2e.test.ts b/src/agents/tools/web-tools.enabled-defaults.e2e.test.ts index cb6dc4969..ff28dbf11 100644 --- a/src/agents/tools/web-tools.enabled-defaults.e2e.test.ts +++ b/src/agents/tools/web-tools.enabled-defaults.e2e.test.ts @@ -269,7 +269,9 @@ describe("web_search external content wrapping", () => { results?: Array<{ description?: string }>; }; - expect(details.results?.[0]?.description).toMatch(/<<>>/); + expect(details.results?.[0]?.description).toMatch( + /<<>>/, + ); expect(details.results?.[0]?.description).toContain("Ignore previous instructions"); expect(details.externalContent).toMatchObject({ untrusted: true, diff --git a/src/security/external-content.ts b/src/security/external-content.ts index 7b6e4313a..49629db9a 100644 --- a/src/security/external-content.ts +++ b/src/security/external-content.ts @@ -148,8 +148,14 @@ function replaceMarkers(content: string): string { const replacements: Array<{ start: number; end: number; value: string }> = []; // Match markers with or without id attribute (handles both legacy and spoofed markers) const patterns: Array<{ regex: RegExp; value: string }> = [ - { regex: /<<>>/gi, value: "[[MARKER_SANITIZED]]" }, - { regex: /<<>>/gi, value: "[[END_MARKER_SANITIZED]]" }, + { + regex: /<<>>/gi, + value: "[[MARKER_SANITIZED]]", + }, + { + regex: /<<>>/gi, + value: "[[END_MARKER_SANITIZED]]", + }, ]; for (const pattern of patterns) {