Skip to content

security: classifier bypass via context word evasion #45

@salishforge

Description

@salishforge

Summary

PII classifier (src/classifier.ts:210-224) boosts confidence based on global context word presence. Attacker can evade detection by omitting context words — e.g., an SSN without "ssn" or "social" nearby stays below 0.5 confidence threshold.

Fix

Increase base confidence for high-sensitivity patterns (SSN, credit card). Consider standalone detection without context boost requirement.

Metadata

Metadata

Assignees

No one assigned

    Labels

    securitySecurity improvements

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions