Unverified50% confidenceSolutionExact time
In resume screening scenarios, an attacker can embed HTML content invisible to the human eye in a PDF (such as CSS-hidden styles, metadata, and HTML comments), and this content is retained when the model reads the plain text and may be executed as instructions.
1
Sources
50%
Confidence
Long-term
Relevance
10/17/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedFor interactive components such as tabs, accordions and "read more", the text should be kept in the DOM and hidden with CSS rather than loaded on click, so that it is visible to AI crawlers.72% similarUnverifiedLetting AI read browser tabs exposes the web content the user is browsing to the model, and that content may include work documents, private emails, medical information, bank pages, or undisclosed project materials.72% similarUnverified间接注入攻击手法包括在网页嵌入与背景色相同的隐藏文字、在PDF元数据或注释字段植入越狱指令、利用Markdown语法伪装恶意提示70% similarUnverifiedIf content is rendered only via client-side rendering or is hidden from AI crawlers, Schema markup will often also go unread.68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1054570API
curl https://kongchang.com/api/v1/knowledge/claims/1054570MCP
get_claim(id=1054570)