# AI 요약에 숨겨진 태그가 유출됩니다

**URL:** https://meta.discourse.org/t/ai-summary-leaking-hidden-tags/389292
**Category:** Bug
**Tags:** ai, fixed
**Created:** [11월 20, 2025, 10:32오후 UTC](https://meta.discourse.org/t/ai-summary-leaking-hidden-tags/389292 "2025-11-20T22:32:47Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![tvavrda](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tvavrda/32/480674_2.png) [@tvavrda](https://meta.discourse.org/u/tvavrda)
#### Post date: [11월 20, 2025, 10:32오후 UTC](https://meta.discourse.org/t/ai-summary-leaking-hidden-tags/389292/1 "2025-11-20T22:32:48Z")

</div>

방금 [이 글](https://meta.discourse.org/t/is-there-a-way-to-associate-a-transaction-id-with-an-invitation-link/386113/4)의 요약에 일반 사용자에게 숨겨져 있는 태그가 노출되어 있는 걸 발견했어요. 🙂

 ![image](https://global.discourse-cdn.com/meta/original/4X/8/9/9/8991d103954065842a2b343ea1fa3bba88d1933c.png)

더 있습니다:

 ![image](https://global.discourse-cdn.com/meta/original/4X/9/0/c/90c24f6e8960653bb41c143d1c5eb9ddaaf7127d.png)

---

<div class="post-metadata">

### Author: ![tobiaseigen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tobiaseigen/32/539204_2.png) [@tobiaseigen](https://meta.discourse.org/u/tobiaseigen)
#### Post date: [11월 20, 2025, 10:35오후 UTC](https://meta.discourse.org/t/ai-summary-leaking-hidden-tags/389292/2 "2025-11-20T22:35:08Z")

</div>

잘 찾아냈네요! @sam 또는 @Falco, 이거 수정해 줄 수 있어요?

---

<div class="post-metadata">

### Author: ![NateDhaliwal](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/natedhaliwal/32/313494_2.png) [@NateDhaliwal](https://meta.discourse.org/u/NateDhaliwal)
#### Post date: [11월 20, 2025, 10:47오후 UTC](https://meta.discourse.org/t/ai-summary-leaking-hidden-tags/389292/3 "2025-11-20T22:47:35Z")

</div>

게다가 링크가 완전히 엉망이 되어 있습니다:

 ![Screenshot_20251121_064425_Chrome](https://global.discourse-cdn.com/meta/original/4X/d/0/6/d06fd0bdb2872bcfddb2f5dd55013a8cc712c093.jpeg)

> [@tvavrda](#):
>
> 더 있습니다:
> 
> ![image](https://global.discourse-cdn.com/meta/original/4X/9/0/c/90c24f6e8960653bb41c143d1c5eb9ddaaf7127d.png)

흥미롭네요. # 없이도 가능하다는 걸 처음 알았습니다. 다른 숨겨진 태그들도 검색할 수 있는 것 같습니다. 물론 이는 의도된 동작이 아닐 거라고 생각하지만요?

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [12월 2, 2025, 2:07오후 UTC](https://meta.discourse.org/t/ai-summary-leaking-hidden-tags/389292/5 "2025-12-02T14:07:08Z")

</div>

> <https://github.com/discourse/discourse/pull/36167>
>
> Hidden tags (restricted to specific user groups via tag group permissions) were …being included in AI-generated topic summaries.
> 
> \## Changes
> 
> \- Filter tags using \`Guardian.new(nil)\` to get only publicly visible tags
> \- Add migration to delete existing summaries containing hidden tags  
> \- Add test coverage for hidden tag filtering
> 
> \## Technical Details
> 
> The fix uses \`topic.visible\_tags(Guardian.new(nil))\` which:
> \- Operates on already-loaded tag associations (efficient)
> \- Uses anonymous guardian for most restrictive permissions
> \- Benefits from guardian memoization
> \- Follows standard Discourse pattern
> 
> The migration uses a single regex query to match all hidden tags efficiently, erring on the side of caution since summaries regenerate automatically.

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [12월 6, 2025, 11:00오전 UTC](https://meta.discourse.org/t/ai-summary-leaking-hidden-tags/389292/6 "2025-12-06T11:00:17Z")

</div>

이 주제는 3일 후 자동으로 닫혔습니다. 새 답글 작성은 더 이상 허용되지 않습니다.
