Prismata: Confining cross-site prompt injection in web agents arxiv.org 14 points by zhinit 9 days ago · 1 comment Reader PiP Save No comments yet.