/api/config exposing information

[iamfriedbean]

Hi,
the path for example https://test.com/api/config is exposing info to clients including such as promptprefix instruction (looks like taken from modelSpecs. How do we hide so these info are not exposed.

Thanks

[danny-avila]

That is used on the frontend to ensure the conversation state applies correctly. Doing it like this allows mixing of endpoints/modelSpecs mid-conversation

[iamfriedbean]

Thanks @danny-avila , appreciate the quick response. Looks like no way around if it's front-end use. it's been flagged after security audit as the system instruction (in promptprefix) is visible to user. Wondering if there are other way to provide these instructions without clients seeing it.

[danny-avila]

I understand the sensitivity to exposing the prompts, let me think about how to address this and I will get around to it this week

[iamfriedbean]

Thank you @danny-avila . I'll watch this page.

[prononext]

Yes that indeed is a security issue. About exposing promts. If you have modelSpecs enabled the promts you have used can also be viewed if you do not deactivate the other endpoints and click on configure icon on the right side of the model... Would be nice if modelSpecs are excluded to be viewed like this.