I'm never 100% sure if that works or not – did that input get turned into those single tokens (arguably an injection security risk) or did it tokenize the input as "<" and then "gh" and so on?

→ View original post on X — @simonw,