Prismata: New Framework Blocks Cross-Site Prompt Injection in Web Agents

Researchers propose Prismata, a framework to confine cross-site prompt injection attacks in LLM-based web agents. It uses a dual-context architecture to isolate untrusted web content from agent instructions. The approach aims to prevent malicious sites from hijacking agent behavior without sacrificing functionality.