rpriven
b0679267d7
A fake "Acme Corp" support bot with deliberately weak defenses, for demonstrating prompt-injection attacks and basic hardening. Includes a 3-level defense progression (none -> instruction -> output filter), full JSONL logging, a live attack-attempt feed, and light/dark mode. All "secrets" are fake demo values. For authorized security education only. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
57 lines
692 B
Text
57 lines
692 B
Text
# --- Dependencies ---
|
|
node_modules/
|
|
.bun/
|
|
|
|
# --- Build output ---
|
|
out/
|
|
dist/
|
|
build/
|
|
*.tgz
|
|
*.tsbuildinfo
|
|
|
|
# --- Logs & transcripts (may contain full chat/attack output) ---
|
|
logs/
|
|
*.log
|
|
*.jsonl
|
|
npm-debug.log*
|
|
yarn-debug.log*
|
|
yarn-error.log*
|
|
report.[0-9]*.json
|
|
|
|
# --- Secrets / environment (never commit) ---
|
|
.env
|
|
.env.*
|
|
!.env.example
|
|
*.pem
|
|
*.key
|
|
*.p12
|
|
*.pfx
|
|
secrets.*
|
|
credentials.*
|
|
|
|
# --- Caches ---
|
|
.cache/
|
|
.eslintcache
|
|
.parcel-cache/
|
|
|
|
# --- Test / coverage ---
|
|
coverage/
|
|
*.lcov
|
|
|
|
# --- Editors / IDEs ---
|
|
.idea/
|
|
.vscode/
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
|
|
# --- OS cruft ---
|
|
.DS_Store
|
|
Thumbs.db
|
|
desktop.ini
|
|
|
|
# --- Browser-verification & scratch artifacts ---
|
|
.playwright-mcp/
|
|
*-verify.png
|
|
screenshots/
|
|
scratch/
|