@misc{indiciae9d8b3bc1b22c,
  title = {Prismata: Confining Cross-Site Prompt Injection in Web Agents},
  author = {Corban Villa and Alp Eren Ozdarendeli and Sijun Tan and Raluca Ada Popa},
  year = {2026},
  url = {https://arxiv.org/abs/2607.08147},
  note = {Source identifier: 2607.08147}
}