Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion server/config/feature_flag_configs/production.json
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@
},
{
"name": "follow_up_questions_ga",
"enabled": false,
"enabled": true,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

security-high high

Enabling this feature flag re-introduces a risk that led to a previous incident. The feature generates hyperlinks that web crawlers can follow, potentially causing excessive calls to the Gemini API and exhausting your quota.

The pull request description mentions that a more permanent fix has been discussed. To prevent a recurrence of the incident, it is strongly recommended to implement this fix before enabling the feature in production. A robust solution would be to add a rel=\"nofollow\" attribute to the generated <a> tags in static/js/apps/explore/follow_up_questions.tsx to instruct crawlers not to follow these links.

"owner": "javiervazquez",
"description": "Enables the follow up questions generated from related topics to general audience."
},
Expand Down
Loading