# Require confirmation for fetch tool \(\#36881\) · gitcafe/zed

[View on GitCafe](https://git.cafe/gitcafe/zed/commit/a102b087438c0424ce32a47177b7e16132aa24df)

Repository: [gitcafe/zed](https://git.cafe/gitcafe/zed)

Visibility: public

Requested revision: a102b087438c0424ce32a47177b7e16132aa24df

Requested commit: a102b087438c0424ce32a47177b7e16132aa24df

Commit: a102b087438c0424ce32a47177b7e16132aa24df

Tree: c0ab6d4574f5eec34029f26fac312194cab4bedb

Author: Conrad Irwin

Committer: GitHub

## Message

```
Require confirmation for fetch tool (#36881)

Using prompt injection, the agent may be tricked into making a fetch
request that includes unexpected data from the conversation in the URL.

As agent conversations may contain sensitive information (like private
code, or
potentially even API keys), this seems bad.

The easiest way to prevent this is to require the user to look at the
URL
before the model is allowed to fetch it.

Thanks to @ant4g0nist for bringing this to our attention.

Release Notes:

- agent panel: The fetch tool now requires confirmation.
```

## Parents

- [2dc4f156b387ccd4698fbf1a5e54ea7050b738ca](https://git.cafe/gitcafe/zed/commit/2dc4f156b387ccd4698fbf1a5e54ea7050b738ca?format=markdown)

[Source at this commit](https://git.cafe/gitcafe/zed/tree/a102b087438c0424ce32a47177b7e16132aa24df?format=markdown)