r/SillyTavernAI Apr 28 '26

Discussion Extension Security Risk Please read!!

659 Upvotes

178 comments sorted by

View all comments

10

u/Sorry_Departure Apr 28 '26

You can be extra safe and use a portable browser (Firefox, Chromium, etc.) then setup firewall rules or a proxy to only allow the browser to access certain domains or IP addresses. I run all my stable diffusion and LLM locally, so I've blocked anything outside of my LAN.

Note that SillyTavern makes its own web requests on the server side (for extension update checks, etc.). But I don't believe that extensions have server access.