feat(security): enable prompt injection mitigation by default for internal users via non-overridable env vars (#9612)

2026-06-10 10:13:29 +10:00
parent d396767be8
commit f52d717dce
6 changed files with 129 additions and 57 deletions
@@ -47,8 +47,6 @@ pub async fn run() -> Result<()> {
    boot_marker("main entered");
    crate::logging::setup_logging(Some("goosed"))?;

-    goose::security::set_security_defaults();
-
    let settings = configuration::Settings::new()?;

    let secret_key = std::env::var("GOOSE_SERVER__SECRET_KEY")