GitHub Copilot Filename Prompt Injection

GitHub Copilot Chat (Agent mode)

Arbitrary instruction execution via extremely long filenames containing prompt injections; Microsoft declined to fix

Copilot appends file names to user prompts without sanitization