Sijun Tan

Prismata: Confining Cross-Site Prompt Injection in Web Agents

Corban Villa, Alp Eren Ozdarendeli, Sijun Tan, Raluca Ada Popa

Autonomous web agents promise to automate everyday browsing tasks, but inherit one of the web's oldest attack surfaces. Cross-Site Scripting proved that mixing trusted and untrusted content is dangerous, even on benign pages. Agents resurface this risk by interpreting natural lan…Read more