Agentic Browser Security: Indirect Prompt Injection in Perplexity Cometsimonwillison.net4 pointsdonohoe10 months ago