Skip to content

feat: add current date and time to system instructions in the sample travel app #713

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
juan-vgv wants to merge 1 commit into
base: main
Choose a base branch
from
Open

feat: add current date and time to system instructions in the sample travel app #713

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions examples/travel_app/lib/src/travel_planner_page.dart
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -246,6 +246,8 @@ String? _imagesJson;

final prompt =
'''
Today is ${DateTime.timestamp()}
Copy link
Contributor

@gemini-code-assist gemini-code-assist bot Feb 12, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

security-high high

This line is part of a broader context vulnerable to Prompt Injection. User-provided input from the chat is passed directly to the LLM without sanitization (see _sendPrompt and _triggerInference), allowing attackers to override instructions. Remediation includes implementing input sanitization on user-provided text and considering instruction defense. Furthermore, the prompt is a final top-level variable, causing DateTime.timestamp() to be evaluated only once. This means the date can become stale in long-running app sessions, potentially leading to incorrect responses for relative date queries. Consider changing prompt to a getter to ensure the date is fresh if the widget state is recreated.


# Instructions

You are a helpful travel agent assistant that communicates by creating and
Expand Down