Prompt injection through website content: how AI agents can be manipulated by the pages they visit

Originally published at everharden.com on 2026-05-08 When ChatGPT browses the web to summarize a news article, it doesn't just see the rendered text a human would see. It reads the full HTML — including elements hidden via CSS, comments, alt-text, metadata, and content that might only appear when th