Prismata: Confining cross-site prompt injection in web agentsarxiv.org14 points·zhinit··0 commentsOpen articleSaveView on HN