security(hooks): Wrap hook-injected context in distinct XML tags (#17237)

Co-authored-by: Yuna Seol <yunaseol@google.com>
2026-04-21 18:44:30 -07:00 · 2026-01-21 21:11:45 -05:00
parent 75e4f492ab
commit 5debf86854
8 changed files with 136 additions and 12 deletions
@@ -317,7 +317,9 @@ export const AppContainer = (props: AppContainerProps) => {
        if (additionalContext && geminiClient) {
          await geminiClient.addHistory({
            role: 'user',
-            parts: [{ text: additionalContext }],
+            parts: [
+              { text: `<hook_context>${additionalContext}</hook_context>` },
+            ],
          });
        }
      }