--- title: "OpenAI Explains URL-Based Data Exfiltration Mitigations in New Paper · Embrace The Red" url: https://daily.dev/posts/openai-explains-url-based-data-exfiltration-mitigations-in-new-paper-embrace-the-red-hqbjob0ei source_url: https://embracethered.com/blog/posts/2026/data-exfiltration-mitigation-paper-by-openai/ type: article source: "Embrace The Red" published: 2026-02-05T12:10:45.683Z updated: 2026-02-05T12:11:04.271Z tags: ["security", "llm", "openai", "chatgpt", "prompt-injection"] reading_time: 5 upvotes: 1 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # OpenAI Explains URL-Based Data Exfiltration Mitigations in New Paper · Embrace The Red **[Embrace The Red](https://daily.dev/sources/embracethered)** · 5 min read · 1 upvotes · 0 comments ## Summary OpenAI published a paper detailing URL-based data exfiltration mitigations in language model agents. The mitigations use a web crawler to create an allow-list of safe URLs, blocking dynamically created ones. While this increases attack complexity, bypasses remain possible through techniques like mapping individual letters to indexed URLs. The author, who originally disclosed this vulnerability in 2023, suggests additional mitigations like URL caching and preventing repeated visits to the same URL within a session. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Keeping your data safe when an AI agent clicks a link](https://daily.dev/posts/keeping-your-data-safe-when-an-ai-agent-clicks-a-link-y8dci6fk6) · OpenAI · 4 upvotes · 0 comments - [OpenAI says AI browsers may always be vulnerable to prompt injection attacks](https://daily.dev/posts/openai-says-ai-browsers-may-always-be-vulnerable-to-prompt-injection-attacks-g4kbzmeiw) · TechCrunch · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#llm](https://daily.dev/tags/llm), [#openai](https://daily.dev/tags/openai), [#chatgpt](https://daily.dev/tags/chatgpt), [#prompt-injection](https://daily.dev/tags/prompt-injection) [View this post on daily.dev](https://daily.dev/posts/openai-explains-url-based-data-exfiltration-mitigations-in-new-paper-embrace-the-red-hqbjob0ei)