Unverified50% confidenceFactExact time
In LLM applications, instructions and data travel through the same channel, which is the key point that traditional web penetration testing misses.
1
Sources
50%
Confidence
Long-term
Relevance
10/16/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe correct pattern for an LLM web application is to have the backend call the LLM API with stream=True using a secret key stored in an environment variable, and immediately forward each text chunk to the browser as it arrives.71% similarUnverifiedMainstream LLM APIs all send discrete JSON payloads in the data field of SSE, ending the stream with the sentinel string data: [DONE].66% similarUnverified主流LLM API采用无状态设计，每次API调用都是独立的HTTP请求，工具列表作为请求体传入，服务端不维护跨请求的工具状态66% similarUnverifiedFrameworks such as Browser Use and Browserbase encapsulate the LLM call layer, enabling browser operations to be driven by natural language.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1047761API
curl https://kongchang.com/api/v1/knowledge/claims/1047761MCP
get_claim(id=1047761)