That "mark pasted text" thing is interesting: https://platform.claude.com/docs/en/build-with-claude/prompt...
Summarize the main complaints in this thread.
<pasted_content id="ab12">
...text the user pasted...
</pasted_content id="ab12">
Where those IDs are randomly generated and unknown to the user, and the model is told to use that markup to help avoid it suffering prompt injection attacks.In the past I've been very skeptical of this kind of protection. Anthropic have clearly trained their models for this though, so maybe Opus 5.5 is smart enough for this to work?
Will be interesting to see if minds more devious than mine can break it.
Got to love the pseudo markup slop! An id attribute on an XML closing tag?!? Complete nonsense. Working nonsens, of course, but still nonsense.
> Working nonsens, of course
Well, maybe? There is a lot of valid XML ingested in the training data, so I wonder what happens when the model encounters:
Surely whatever is putting in the <pasted_content ...> tags is also escaping the pasted content with e.g. < to <
Put in a CDATA section and all bets are off. Maybe that is the next benchmark? Parse this XML correctly. Oh, by the way it must be valid, and here is a DTD. Using code is cheating.
But <![CDATA[xyz]]> would become <![CDATA[some stuff]]>
It's basically just a MIME boundary but in a pseudo-XML format which the model understands more readily. Seems pretty reasonable to me, even though it may not be an ideal solution in every regard.
I've switching from only using markdown in my prompts to using XML tags this year too. It's not only easy for the model to see when something ends, it's quite useful for me too.
in retrospect though, how many malformed 3-column website layouts could we have avoided with this technology? :-)