Preprint
Jul 2026
Prismata: Confining Cross-Site Prompt Injection in Web Agents
Prismata is presented, a defense enforcing contextual least privilege for web agents, constraining both what the agent sees and what it can do, and substantially reduces attack success while preserving benign task utility.
Corban Villa, Alp Eren Ozdarendeli, Sijun Tan et al.
· 1 citation